{"id":"CVE-2026-77496","published":"2026-10-13T19:19:53.657","lastModified":"2026-10-16T16:21:03.017","description":"Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77496","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Windows Imaging Component allows remote attackers to execute arbitrary code on affected systems. This vulnerability arises from insufficient bounds checking when processing image files, potentially enabling attackers to gain full system control.","exploitability":"Exploitation is moderately difficult requiring a user interaction via a malicious image file, with no special privileges needed for the initial attack vector.","blast_radius":"The vulnerability could impact a wide range of Windows systems that process image files, particularly those exposed to untrusted content such as email attachments, web downloads, or network shares.","remediation":"Apply the Windows update KB5049731 or later to patch the heap overflow in Windows Imaging Component.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","image-processing","windows"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:57:33.859Z"}}