{"id":"CVE-2026-83934","published":"2026-10-13T19:20:50.150","lastModified":"2026-10-16T16:21:49.363","description":"Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-121"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83934","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A stack-based buffer overflow in Windows GDI+ allows remote attackers to execute arbitrary code when processing specially crafted graphics data. This vulnerability is particularly concerning because it can be exploited over the network without requiring user interaction, making it highly attractive to threat actors.","exploitability":"Exploitation is moderately difficult as it requires crafting a specific GDI+ graphics payload that triggers the buffer overflow, but the attack surface is broad since GDI+ is used throughout Windows applications for rendering graphics.","blast_radius":"If exploited, this vulnerability could allow attackers to execute code with the privileges of the affected application, potentially leading to full system compromise across multiple Windows systems that use GDI+ for graphics processing.","remediation":"Apply the latest Windows updates from Microsoft's May 2026 security bulletin, specifically addressing GDI+ buffer overflow vulnerabilities in the Windows GDI+ component.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","windows","gdi","buffer-overflow"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:00:07.780Z"}}