Product:
Windows GDI
Summary
Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally. This vulnerability can lead to significant impacts on confidentiality, integrity, and availability. Attackers can exploit this flaw to gain control over affected systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2026-35421 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the system and can execute a specially crafted application that triggers the buffer overflow. This requires user interaction, as the user must run the malicious application. Once executed, the attacker can potentially execute arbitrary code with the same privileges as the user.
Affected Products
- Windows GDI: A graphics device interface that allows applications to use graphics and formatted text on both the video display and the printer.
Mitigation
To mitigate this vulnerability, users should ensure that their systems are updated with the latest security patches from Microsoft. Additionally, users should avoid running untrusted applications and limit local access to their systems.