CVE-2026-81955: Windows Graphics Component Remote Code Execution Vulnerability

Published Sep 8, 2026
·
Updated

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Other sources

Windows Graphics Component Remote Code Execution Vulnerability

Microsoft

Affected Software

43 affected componentsFixes available
Microsoft Office 365 for Mac
Microsoft Windows 10=21H2
10.0.19044.7725
Microsoft Office 2016<16.0.5569.1003
16.0.5569.1003
Microsoft Windows Server 2012 R2<6.3.9600.23397
6.3.9600.23397
Microsoft Windows Server 2016<10.0.14393.9504
10.0.14393.9504
Microsoft Windows Server 2012 R2<6.3.9600.23397
6.3.9600.23397
Microsoft Windows Server 2012<6.2.9200.26349
6.2.9200.26349
Microsoft Windows 11=25H2
10.0.26200.9445
Microsoft Windows 10=22H2
10.0.19045.7725
Microsoft Windows 11=26H1
10.0.28000.2954
Microsoft Windows 11=26H1
10.0.28000.2954
Microsoft Windows Server 2025<10.0.26100.33438
10.0.26100.33438
Microsoft Windows Server 2012<6.2.9200.26349
6.2.9200.26349
Microsoft Windows 10=1607
10.0.14393.9504
Microsoft Windows 10=1607
10.0.14393.9504
Microsoft Windows 11=23H2
10.0.22631.7582
Microsoft Windows Server 2016<10.0.14393.9504
10.0.14393.9504
Microsoft Windows 11=24H2
10.0.26100.9445
Microsoft Windows 11=24H2
10.0.26100.9445
Microsoft Windows 11=23H2
10.0.22631.7582
Microsoft Windows 11=25H2
10.0.26200.9445
Microsoft Windows 10=1809
10.0.17763.9245
Microsoft Windows 10=22H2
10.0.19045.7725
Microsoft Windows 10=22H2
10.0.19045.7725
Microsoft Windows 10=21H2
10.0.19044.7725
Microsoft Windows Server 2025<10.0.26100.33438
10.0.26100.33438
Microsoft Windows Server 2022<10.0.20348.5622
10.0.20348.5622
Microsoft Windows 10=21H2
10.0.19044.7725
Microsoft Office LTSC 2024 for 32-bit editions<16.0.17932.20960
16.0.17932.20960
Microsoft Windows Server 2019<10.0.17763.9245
10.0.17763.9245
Microsoft Windows Server 2019<10.0.17763.9245
10.0.17763.9245
Microsoft Office LTSC 2024 for 64-bit editions<16.0.17932.20960
16.0.17932.20960
Microsoft Office 2016<16.0.5569.1003
16.0.5569.1003
Microsoft Windows Server 2022<10.0.20348.5622
10.0.20348.5622
Microsoft Office LTSC for Mac 2024
Microsoft Windows 10=1809
10.0.17763.9245
Microsoft Office LTSC 2021 for 64-bit editions<16.0.14334.20896
16.0.14334.20896
Microsoft Office LTSC 2021 for 32-bit editions<16.0.14334.20896
16.0.14334.20896
Microsoft 365 Apps for Enterprise<16.0.20326.20136
16.0.20326.20136
Microsoft Office 2019 for 64-bit editions<16.0.10417.20204
16.0.10417.20204
Microsoft Office LTSC for Mac 2021
Microsoft Office 2019 for 32-bit editions<16.0.10417.20204
16.0.10417.20204
Microsoft 365 Apps for Enterprise<16.0.20326.20136
16.0.20326.20136

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 16.0.5569.1003Patch KB5002916
  2. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 6.3.9600.23397Patch KB5123066
  3. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.19044.7725Patch KB5122878
  4. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.14393.9504Patch KB5122874
  5. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.26200.9445Patch KB5124008
  6. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 6.2.9200.26349Patch KB5123065
  7. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.19045.7725Patch KB5122878
  8. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.28000.2954Patch KB5124012
  9. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.26100.33438Patch KB5122871
  10. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.22631.7582Patch KB5122880
  11. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.26100.9445Patch KB5124008
  12. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.17763.9245Patch KB5122876
  13. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.20348.5622Patch KB5122882
  14. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 16.0.17932.20960
  15. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 16.0.14334.20896
  16. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 16.0.20326.20136
  17. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 16.0.10417.20204

Event History

Sep 8, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·05:19 PM
Data Sourced
via MITRE·05:19 PM
DescriptionSeverity

Frequently Asked Questions

1

Which systems should be prioritized for review?

The affected software list includes Microsoft Windows 10, Windows 11, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, Windows Server 2022, Windows Server 2025, and Microsoft Office 2016.

2

What access and user involvement does exploitation require?

The CVSS vector indicates network attack access, low attack complexity, and no privileges required. It also indicates user interaction is required.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203