Information Disclosure Vulnerability in Windows GDI by Microsoft

CVE-2026-77491

What is CVE-2026-77491?

This vulnerability in Windows GDI can be exploited by attackers to perform an out-of-bounds read, potentially leading to unauthorized information disclosure on affected systems. By leveraging this flaw, an attacker may gain access to sensitive information stored locally, which can be critical for further exploitation or reconnaissance. Users are urged to apply the latest security updates recommended by Microsoft to mitigate this risk.

References