ZDI-CAN-30441: ZDI-26-543: Microsoft Windows ICC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Published Aug 11, 2026

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. Interaction with the Mscms.dll color management library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-54984.

Affected Software

1 affected component

Microsoft Windows

Event History

Aug 11, 2026

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-30441?

ZDI-CAN-30441 has a risk rating of 79, indicating a high-severity vulnerability.

How do I fix ZDI-CAN-30441?

To fix ZDI-CAN-30441, ensure that you apply the latest security updates from Microsoft for the affected version of Windows.

What type of vulnerability is ZDI-CAN-30441?

ZDI-CAN-30441 is an out-of-bounds write vulnerability that allows for remote code execution.

What is required to exploit ZDI-CAN-30441?

Exploitation of ZDI-CAN-30441 requires interaction with the Mscms.dll color management library.

Which software is affected by ZDI-CAN-30441?

ZDI-CAN-30441 affects various installations of Microsoft Windows that utilize the Microsoft color management features.