Windows Graphics Component Remote Code Execution Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
🎯 Affected products33
- Microsoft Excel for Android
- Microsoft PowerPoint for Android
- Microsoft Word for Android
- Windows 10 Version 1607 for 32-bit Systems
- Windows 10 Version 1607 for x64-based Systems
- Windows 10 Version 1809 for 32-bit Systems
- Windows 10 Version 1809 for x64-based Systems
- Windows 10 Version 21H2 for 32-bit Systems
- Windows 10 Version 21H2 for ARM64-based Systems
- Windows 10 Version 21H2 for x64-based Systems
- Windows 10 Version 22H2 for 32-bit Systems
- Windows 10 Version 22H2 for ARM64-based Systems
- Windows 10 Version 22H2 for x64-based Systems
- Windows 11 Version 23H2 for ARM64-based Systems
- Windows 11 Version 23H2 for x64-based Systems
- Windows 11 Version 24H2 for ARM64-based Systems
- Windows 11 Version 24H2 for x64-based Systems
- Windows 11 Version 25H2 for ARM64-based Systems
- Windows 11 Version 25H2 for x64-based Systems
- Windows 11 Version 26H1 for ARM64-based Systems
- Windows 11 version 26H1 for x64-based Systems
- Windows Server 2012
- Windows Server 2012 (Server Core installation)
- Windows Server 2012 R2
- Windows Server 2012 R2 (Server Core installation)
- Windows Server 2016
- Windows Server 2016 (Server Core installation)
- Windows Server 2019
- Windows Server 2019 (Server Core installation)
- Windows Server 2022
- +3 more not shown
✅ Remediation
KB5094123 (Security Update) — fixed build 10.0.17763.8880 KB5094128 (Security Update) — fixed build 10.0.20348.5256 KB5094127 (Security Update) — fixed build 10.0.19044.7417 KB5094127 (Security Update) — fixed build 10.0.19045.7417 KB5094125 (Security Update) — fixed build 10.0.26100.32995 KB5094126 (Security Update) — fixed build 10.0.26200.8655 KB5093998 (Security Update) — fixed build 10.0.22631.7219 KB5094126 (Security Update) — fixed build 10.0.26100.8655 KB5095051 (Security Update) — fixed build 10.0.28000.2269 KB5094122 (Security Update) — fixed build 10.0.14393.9234 KB5094042 (Monthly Rollup) — fixed build 6.2.9200.26132 KB5094041 (Monthly Rollup) — fixed build 6.3.9600.23228 KBRelease Notes (Security Update) — fixed build 16.0.20131.20024
🔗 References (24)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44803
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5094123
- referencehttps://support.microsoft.com/help/5094123
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5094128
- referencehttps://support.microsoft.com/help/5094128
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5094127
- referencehttps://support.microsoft.com/help/5094127
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5094125
- referencehttps://support.microsoft.com/help/5094125
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5094126
- referencehttps://support.microsoft.com/help/5094126
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5093998
- referencehttps://support.microsoft.com/help/5093998
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5095051
- referencehttps://support.microsoft.com/help/5095051
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5094122
- referencehttps://support.microsoft.com/help/5094122
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5094042
- referencehttps://support.microsoft.com/help/5094042
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5094041
- referencehttps://support.microsoft.com/help/5094041
- patchhttps://play.google.com/store/apps/details?id=com.microsoft.office.excel&hl=en_US
- patchhttps://play.google.com/store/apps/details?id=com.microsoft.office.powerpoint&hl=en_US
- patchhttps://play.google.com/store/apps/details?id=com.microsoft.office.word&hl=en_US