CVEDB API

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 14.4%

CVSS Severity

CVSS v3 Score 7.0

References

Products affected by CVE-2026-102209

Microsoft » Windows 11 26h1 » Version: N/A

cpe:2.3:o:microsoft:windows_11_26h1:-
Microsoft » Windows 11 26h1 » Version: 10.0.28000.1575

cpe:2.3:o:microsoft:windows_11_26h1:10.0.28000.1575
Microsoft » Windows 11 26h1 » Version: 10.0.28000.1719

cpe:2.3:o:microsoft:windows_11_26h1:10.0.28000.1719
Microsoft » Windows 11 26h1 » Version: 10.0.28000.1836

cpe:2.3:o:microsoft:windows_11_26h1:10.0.28000.1836
Microsoft » Windows 11 26h1 » Version: 10.0.28000.2113

cpe:2.3:o:microsoft:windows_11_26h1:10.0.28000.2113
Microsoft » Windows 11 26h1 » Version: 10.0.28000.2269

cpe:2.3:o:microsoft:windows_11_26h1:10.0.28000.2269
Microsoft » Windows 11 26h1 » Version: 10.0.28000.2525

cpe:2.3:o:microsoft:windows_11_26h1:10.0.28000.2525
Microsoft » Windows 11 26h1 » Version: 10.0.28000.2704

cpe:2.3:o:microsoft:windows_11_26h1:10.0.28000.2704