{"id":"CVE-2026-70089","published":"2026-10-13T19:19:20.530","lastModified":"2026-10-16T16:20:30.390","description":"Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70089","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Windows GDI allows remote attackers to execute arbitrary code on affected systems. This vulnerability arises from improper bounds checking when processing graphics data, potentially enabling attackers to gain full system control.","exploitability":"Exploitation requires a remote attacker to send specially crafted graphics data to a vulnerable Windows system, with minimal preconditions needed for successful exploitation.","blast_radius":"If exploited, this vulnerability could allow attackers to execute code remotely on Windows systems with GDI functionality, potentially leading to full system compromise across enterprise networks.","remediation":"Apply the latest Windows security updates immediately, specifically the patch released in the October 2026 Update KB5078900 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","gdi","windows"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:55:12.335Z"}}