VDB

CVE-2026-81955

CVE-2026-81955 PUBLISHED CVSS 8.8 HIGH

Reported by microsoft · Published September 8, 2026

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Risk Scores

CVSS 3.1
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected Products

VendorProductVersions
MicrosoftMicrosoft 365 Apps for Enterprise16.0.1
MicrosoftMicrosoft Office 201616.0.0
MicrosoftMicrosoft Office 201919.0.0
MicrosoftMicrosoft Office 365 for Mac-
MicrosoftMicrosoft Office LTSC 202116.0.1
MicrosoftMicrosoft Office LTSC 202416.0.0
MicrosoftMicrosoft Office LTSC for Mac 2021-
MicrosoftMicrosoft Office LTSC for Mac 2024-
MicrosoftWindows 10 Version 160710.0.14393.0
MicrosoftWindows 10 Version 180910.0.17763.0
MicrosoftWindows 10 Version 21H210.0.19044.0
MicrosoftWindows 10 Version 22H210.0.19045.0
MicrosoftWindows 11 version 23H210.0.22631.0
MicrosoftWindows 11 Version 23H210.0.22631.0
MicrosoftWindows 11 Version 24H210.0.26100.0
MicrosoftWindows 11 Version 25H210.0.26200.0
MicrosoftWindows 11 version 26H110.0.28000.0
MicrosoftWindows Server 20126.2.9200.0
MicrosoftWindows Server 2012 (Server Core installation)6.2.9200.0
MicrosoftWindows Server 2012 R26.3.9600.0

…and 58 more

Timeline

  • Sep 8, 2026 Coalition ESS Score
  • Sep 8, 2026 CVE Published
  • Sep 9, 2026 Security Advisory
  • Sep 9, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›