Product:
Windows GDI
Summary
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. This vulnerability can lead to sensitive information being exposed to unauthorized users. It is important to address this issue to maintain system security.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-27931 |
Exploitation
An attacker can exploit this vulnerability by executing a specially crafted application on a local system. The attacker must have local access to the machine and require user interaction to trigger the out-of-bounds read. Once executed, the application can disclose sensitive information stored in memory.
Affected Products
- Windows GDI: Vulnerable to out-of-bounds read, allowing information disclosure.
Mitigation
To mitigate this vulnerability, users should apply the latest security updates provided by Microsoft. It is also recommended to limit local access to systems and educate users about the risks of executing untrusted applications.