{"id":"CVE-2026-83523","published":"2026-10-13T19:19:58.450","lastModified":"2026-10-13T21:18:25.477","description":"Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83523","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Windows Image Acquisition allows remote attackers to execute arbitrary code on affected systems. This vulnerability arises from insufficient bounds checking when processing image data, potentially enabling attackers to gain full system control.","exploitability":"Exploitation requires a remote attacker to send specially crafted image data to a vulnerable system, with minimal preconditions needed for successful execution.","blast_radius":"If exploited, this vulnerability could allow attackers to execute code remotely on Windows systems that have Image Acquisition services enabled, potentially leading to full system compromise across enterprise networks.","remediation":"Apply the latest Windows updates containing the fix for CVE-2026-83523, specifically the update KB5045678 released in the July 2026 security bulletin.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","windows","image-acquisition","remote-exploit"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:57:57.128Z"}}