PT-2026-70472 · Microsoft · Gdi++1

CVE-2026-62709

Published

2026-08-11

Updated

2026-08-16

CVSS v3.1

5.5

Medium

Vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows GDI+ (affected versions not specified)

Description The use of an uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of Uninitialized Resource

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-62709

Gdi+

Windows