CVE-2026-73017
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.
Risk Assessment
An attacker with local access may execute arbitrary code in the kernel, potentially leading to full system compromise and takeover.
Recommendation
Apply vendor security patches and restrict access to graphics functions to trusted users only.
Other vulnerabilities in Windows Graphics Kernel
See all- CVE-2026-96118High
An out-of-bounds read vulnerability in Windows Graphics Kernel allows an authenticated attacker to elevate privileges locally. The flaw stems from improper reading of data beyond buffer boundaries in the graphics kernel.
- CVE-2026-88110High
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-88073High
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-83582Medium
A use after free vulnerability exists in Windows Graphics Kernel. An authorized attacker can exploit this to disclose information locally.
- CVE-2026-102194High
A use after free vulnerability in the Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-62774High
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-62702Medium
Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to cause denial of service over a network.
- CVE-2026-61346High
A use-after-free vulnerability in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-50493High
Use-after-free vulnerability in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS