CVE-2026-77493: Windows Graphics Component Remote Code Execution Vulnerability
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
Other sources
Windows Graphics Component Remote Code Execution Vulnerability
— Microsoft
Affected Software
Remediation
Event History
Frequently Asked Questions
Which systems should be prioritized for remediation?
Prioritize Microsoft Windows 10 and Windows 11 endpoints, along with Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025 systems. The issue is rated critical and can be exploited remotely without authentication or user interaction.
What access does an attacker need to exploit this issue?
The provided vector indicates network-based exploitation with low attack complexity. An attacker does not need prior privileges or user interaction to exploit the vulnerability.
What is the potential impact of successful exploitation?
Successful exploitation allows code execution and is rated as having high impact to confidentiality, integrity, and availability. The underlying flaw is a double free in the Microsoft Graphics Component.