CVE-2026-54984
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally.
- Affected products
- Windows
- Microsoft Windows 10 1607
- < 10.0.14393.9418
- Microsoft Windows 10 1809
- < 10.0.17763.9115
- Microsoft Windows 10 21h2
- < 10.0.19044.7663
- Microsoft Windows 10 22h2
- < 10.0.19045.7663
- Microsoft Windows 11 23h2
- < 10.0.22631.7517
- Microsoft Windows 11 24h2
- < 10.0.26100.9106
- CVSS 3.1
- 7.8 HIGH
- EPSS
- 0.4% (35th percentile)
- Weakness
- CWE-122
- NVD status
- Analyzed
- Published
- 2026-08-11
CVE-2026-54984 at NVD
1 known exploit for CVE-2026-54984
Proof-of-concept code and exploit modules indexed by Sploitus