Windows Imaging Component
by Microsoft
CVEs (14)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-70296 | Cri | 0.64 | 9.8 | 0.01 | Sep 8, 2026 | Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | ||
| CVE-2016-0195 | Hig | 0.59 | 8.8 | 0.18 | May 11, 2016 | The Imaging Component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted document, aka… | ||
| CVE-2024-38060 | Hig | 0.58 | 8.8 | 0.16 | Jul 9, 2024 | Windows Imaging Component Remote Code Execution Vulnerability | ||
| CVE-2026-83992 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-77495 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-73023 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-73013 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69860 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69499 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-54984 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally. | ||
| CVE-2025-47980 | Med | 0.40 | 6.2 | 0.01 | Jul 8, 2025 | Exposure of sensitive information to an unauthorized actor in Windows Imaging Component allows an unauthorized attacker to disclose information locally. | ||
| CVE-2026-69318 | Med | 0.36 | 5.5 | 0.00 | Sep 8, 2026 | Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally. | ||
| CVE-2026-62740 | Med | 0.36 | 5.5 | 0.00 | Aug 11, 2026 | Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally. | ||
| CVE-2025-53799 | Med | 0.36 | 5.5 | 0.01 | Sep 9, 2025 | Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally. |
- risk 0.64cvss 9.8epss 0.01
Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- risk 0.59cvss 8.8epss 0.18
The Imaging Component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted document, aka…
- risk 0.58cvss 8.8epss 0.16
Windows Imaging Component Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally.
- risk 0.40cvss 6.2epss 0.01
Exposure of sensitive information to an unauthorized actor in Windows Imaging Component allows an unauthorized attacker to disclose information locally.
- risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
- risk 0.36cvss 5.5epss 0.00
Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally.
- risk 0.36cvss 5.5epss 0.01
Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.