Heap-based Buffer Overflow in Windows Imaging Component by Microsoft
CVE-2026-54984
Key Information:
- Vendor
Microsoft
- Vendor
- CVE Published:
- 11 August 2026
Badges
What is CVE-2026-54984?
A heap-based buffer overflow vulnerability exists in the Windows Imaging Component, which could allow an unauthorized attacker to execute arbitrary code locally. This flaw can be exploited by malicious actors to manipulate memory allocation and potentially gain unauthorized access to system resources. It is crucial for users and organizations to apply available patches immediately to mitigate potential risks associated with this vulnerability.
Affected Version(s)
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.9418
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.9115
Windows 10 Version 21H2 32-bit Systems 10.0.19044.0 < 10.0.19044.7663
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.