CVE-2026-73018 – Graphic Fonts Remote Code Execution Vulnerability
CVSS 8.8
IMPORTANT
Critical - Same Day Deployment
“A malicious file could turn a simple user action into remote code execution, putting the confidentiality, integrity, and availability of affected Windows systems at risk.”
CVE-2026-73018 is a Critical remote code execution vulnerability caused by a heap-based buffer overflow in Graphic Fonts. An unauthorized remote attacker can target the vulnerability by getting a user to open a specially crafted file. Successful exploitation can allow code execution on the affected system. The vulnerability requires no attacker privileges, but user interaction is required.
Key Details
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- Required
- CWE Classification
- CWE-122
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.