A critical heap-based buffer overflow in the Windows GDI+ component poses a high risk of remote code execution on multiple versions of Windows 10 and 11.

The Windows GDI+ component contains a heap-based buffer overflow that can be triggered by an unauthenticated attacker, though it requires user interaction to facilitate the attack.

With a CVSS score of 9.6, this vulnerability represents a severe threat to endpoint security. Successful exploitation could allow an attacker to gain full control over the user workstation, potentially leading to unauthorized data access and persistence on the corporate network.

Immediate Action: Deploy the latest cumulative security updates from Microsoft to all affected Windows 10 and 11 endpoints.

Proactive Monitoring: Review endpoint security logs for process crashes or unusual behavior within the GDI+ library or related graphics rendering processes.

Compensating Controls: Ensure robust email and web filtering is in place to prevent users from interacting with malicious files that could trigger the overflow.

Public Exploit Available: No (exploit_available: false)

Security teams should push these updates via standard patch management channels immediately. Because this vulnerability affects a core graphics component, all systems should be considered at risk until the patch is applied.