{"id":"CVE-2026-83929","published":"2026-10-13T19:20:49.403","lastModified":"2026-10-16T16:21:48.747","description":"Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-787"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83929","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Windows GDI's out-of-bounds write vulnerability allows remote code execution when processing graphics data, potentially enabling attackers to run arbitrary code on affected systems.","exploitability":"Exploitation requires a remote attacker to craft malicious graphics content that triggers the buffer overflow, with minimal preconditions needed for successful exploitation.","blast_radius":"The vulnerability affects all Windows systems running GDI services, with high impact as it can lead to full system compromise from remote network-based attacks.","remediation":"Apply the latest Windows updates including KB5042819 or later patches to address this GDI out-of-bounds write vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","gdi","windows","remote"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:00:01.172Z"}}