Heap-Based Buffer Overflow in Microsoft Color Management by Microsoft
CVE-2026-96054
7HIGH
Key Information:
- Vendor
Microsoft
- Vendor
- CVE Published:
- 10 November 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-96054?
A heap-based buffer overflow vulnerability exists in Microsoft Color Management, which could allow an attacker to execute code locally without authorization. This security flaw is critical to address as it can lead to unauthorized actions within the affected system, emphasizing the importance of applying appropriate patches and updates.
Affected Version(s)
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.9688
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.9487
Windows 10 Version 21H2 32-bit Systems 10.0.19044.0 < 10.0.19044.7846
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.