CVE-2026-81955 – Windows Graphics Component Remote Code Execution Vulnerability
CVSS 8.8
IMPORTANT
Critical - Same Day Deployment
“A malicious document could turn a routine file-open action into remote code execution, putting sensitive data and system integrity at risk.”
CVE-2026-81955 is a critical heap-based buffer overflow vulnerability in the Microsoft Graphics Component. An unauthorized attacker can send a specially crafted RTF file and convince a user to open it in Microsoft Word and save it as a filtered web page. Successful exploitation can execute code in the user’s context. Authentication and prior privileges are not required, although user interaction is required. The Preview Pane is not an attack vector.
Key Details
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- Required
- CWE Classification
- CWE-122
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.