CVE-2026-72986 – Graphic Fonts Remote Code Execution Vulnerability
CVSS 8.8
IMPORTANT
Critical - Same Day Deployment
“A malicious file can turn a simple open action into remote code execution, putting affected Windows systems and their data at serious risk.”
CVE-2026-72986 is a critical remote code execution vulnerability in Microsoft Windows Graphic Fonts. A heap-based buffer overflow and integer overflow or wraparound can allow an unauthorized attacker to execute code when a user opens a specially crafted file. The attack requires no privileges, but user interaction is required.
Key Details
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- Required
- CWE Classification
- CWE-122
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.