Read the docs
TI-2026-56561 Aliases CVE-2026-81955GHSA-g5v3-7q65-84f8

Windows Graphics Component Remote Code Execution Vulnerability

Priority MEDIUM 42CWE-122Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Microsoft. Impact type from Microsoft.

Summary

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00837 57th percentileScored 2026-11-07
Fix Fixed Microsoft: 11 updates

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MicrosoftMicrosoft 365 Apps for Enterprise16.0.1 to before 16.0.20326.2013816.0.20326.20138Patch availableCNA
MicrosoftMicrosoft Office 201616.0.0 to before 16.0.5569.100316.0.5569.1003Patch availableCNA
MicrosoftMicrosoft Office 201919.0.0 to before 16.0.10417.2020716.0.10417.20207Patch availableCNA
MicrosoftMicrosoft Office 365 for Mac1.0.0 to before 16.113.2609143316.113.26091433Patch availableCNA
MicrosoftMicrosoft Office LTSC 202116.0.1 to before 16.0.14334.2090616.0.14334.20906Patch availableCNA
MicrosoftMicrosoft Office LTSC 202416.0.0 to before 16.0.17932.2097616.0.17932.20976Patch availableCNA
MicrosoftMicrosoft Office LTSC for Mac 202116.0.1 to before 16.113.2609143316.113.26091433Patch availableCNA
MicrosoftMicrosoft Office LTSC for Mac 202416.0.0 to before 16.113.2609143316.113.26091433Patch availableCNA
MicrosoftWindows 10 Version 160710.0.14393.0 to before 10.0.14393.950410.0.14393.9504Patch availableCNA
MicrosoftWindows 10 Version 180910.0.17763.0 to before 10.0.17763.924510.0.17763.9245Patch availableCNA
MicrosoftWindows 10 Version 21H210.0.19044.0 to before 10.0.19044.772510.0.19044.7725Patch availableCNA
MicrosoftWindows 10 Version 22H210.0.19045.0 to before 10.0.19045.772510.0.19045.7725Patch availableCNA
MicrosoftWindows 11 version 23H210.0.22631.0 to before 10.0.22631.758210.0.22631.7582Patch availableCNA
MicrosoftWindows 11 Version 23H210.0.22631.0 to before 10.0.22631.758210.0.22631.7582Patch availableCNA
MicrosoftWindows 11 Version 24H210.0.26100.0 to before 10.0.26100.944510.0.26100.9445Patch availableCNA
MicrosoftWindows 11 Version 25H210.0.26200.0 to before 10.0.26200.944510.0.26200.9445Patch availableCNA
MicrosoftWindows 11 version 26H110.0.28000.0 to before 10.0.28000.295410.0.28000.2954Patch availableCNA
MicrosoftWindows Server 20126.2.9200.0 to before 6.2.9200.263496.2.9200.26349Patch availableCNA
MicrosoftWindows Server 2012 (Server Core installation)6.2.9200.0 to before 6.2.9200.263496.2.9200.26349Patch availableCNA
MicrosoftWindows Server 2012 R26.3.9600.0 to before 6.3.9600.233986.3.9600.23398Patch availableCNA
MicrosoftWindows Server 2012 R2 (Server Core installation)6.3.9600.0 to before 6.3.9600.233986.3.9600.23398Patch availableCNA
MicrosoftWindows Server 201610.0.14393.0 to before 10.0.14393.950410.0.14393.9504Patch availableCNA
MicrosoftWindows Server 2016 (Server Core installation)10.0.14393.0 to before 10.0.14393.950410.0.14393.9504Patch availableCNA
MicrosoftWindows Server 201910.0.17763.0 to before 10.0.17763.924510.0.17763.9245Patch availableCNA
MicrosoftWindows Server 2019 (Server Core installation)10.0.17763.0 to before 10.0.17763.924510.0.17763.9245Patch availableCNA
MicrosoftWindows Server 202210.0.20348.0 to before 10.0.20348.562210.0.20348.5622Patch availableCNA
MicrosoftWindows Server 202510.0.26100.0 to before 10.0.26100.3343810.0.26100.33438Patch availableCNA
MicrosoftWindows Server 2025 (Server Core installation)10.0.26100.0 to before 10.0.26100.3343810.0.26100.33438Patch availableCNA
  • Microsoft 365 Apps for Enterprise VendorMicrosoft Affected 16.0.1 to before 16.0.20326.20138 Fixed in 16.0.20326.20138 Patch available CNA
  • Microsoft Office 2016 VendorMicrosoft Affected 16.0.0 to before 16.0.5569.1003 Fixed in 16.0.5569.1003 Patch available CNA
  • Microsoft Office 2019 VendorMicrosoft Affected 19.0.0 to before 16.0.10417.20207 Fixed in 16.0.10417.20207 Patch available CNA
  • Microsoft Office 365 for Mac VendorMicrosoft Affected 1.0.0 to before 16.113.26091433 Fixed in 16.113.26091433 Patch available CNA
  • Microsoft Office LTSC 2021 VendorMicrosoft Affected 16.0.1 to before 16.0.14334.20906 Fixed in 16.0.14334.20906 Patch available CNA
  • Microsoft Office LTSC 2024 VendorMicrosoft Affected 16.0.0 to before 16.0.17932.20976 Fixed in 16.0.17932.20976 Patch available CNA
  • Microsoft Office LTSC for Mac 2021 VendorMicrosoft Affected 16.0.1 to before 16.113.26091433 Fixed in 16.113.26091433 Patch available CNA
  • Microsoft Office LTSC for Mac 2024 VendorMicrosoft Affected 16.0.0 to before 16.113.26091433 Fixed in 16.113.26091433 Patch available CNA
  • Windows 10 Version 1607 VendorMicrosoft Affected 10.0.14393.0 to before 10.0.14393.9504 Fixed in 10.0.14393.9504 Patch available CNA
  • Windows 10 Version 1809 VendorMicrosoft Affected 10.0.17763.0 to before 10.0.17763.9245 Fixed in 10.0.17763.9245 Patch available CNA
  • Windows 10 Version 21H2 VendorMicrosoft Affected 10.0.19044.0 to before 10.0.19044.7725 Fixed in 10.0.19044.7725 Patch available CNA
  • Windows 10 Version 22H2 VendorMicrosoft Affected 10.0.19045.0 to before 10.0.19045.7725 Fixed in 10.0.19045.7725 Patch available CNA
  • Windows 11 version 23H2 VendorMicrosoft Affected 10.0.22631.0 to before 10.0.22631.7582 Fixed in 10.0.22631.7582 Patch available CNA
  • Windows 11 Version 23H2 VendorMicrosoft Affected 10.0.22631.0 to before 10.0.22631.7582 Fixed in 10.0.22631.7582 Patch available CNA
  • Windows 11 Version 24H2 VendorMicrosoft Affected 10.0.26100.0 to before 10.0.26100.9445 Fixed in 10.0.26100.9445 Patch available CNA
  • Windows 11 Version 25H2 VendorMicrosoft Affected 10.0.26200.0 to before 10.0.26200.9445 Fixed in 10.0.26200.9445 Patch available CNA
  • Windows 11 version 26H1 VendorMicrosoft Affected 10.0.28000.0 to before 10.0.28000.2954 Fixed in 10.0.28000.2954 Patch available CNA
  • Windows Server 2012 VendorMicrosoft Affected 6.2.9200.0 to before 6.2.9200.26349 Fixed in 6.2.9200.26349 Patch available CNA
  • Windows Server 2012 (Server Core installation) VendorMicrosoft Affected 6.2.9200.0 to before 6.2.9200.26349 Fixed in 6.2.9200.26349 Patch available CNA
  • Windows Server 2012 R2 VendorMicrosoft Affected 6.3.9600.0 to before 6.3.9600.23398 Fixed in 6.3.9600.23398 Patch available CNA
  • Windows Server 2012 R2 (Server Core installation) VendorMicrosoft Affected 6.3.9600.0 to before 6.3.9600.23398 Fixed in 6.3.9600.23398 Patch available CNA
  • Windows Server 2016 VendorMicrosoft Affected 10.0.14393.0 to before 10.0.14393.9504 Fixed in 10.0.14393.9504 Patch available CNA
  • Windows Server 2016 (Server Core installation) VendorMicrosoft Affected 10.0.14393.0 to before 10.0.14393.9504 Fixed in 10.0.14393.9504 Patch available CNA
  • Windows Server 2019 VendorMicrosoft Affected 10.0.17763.0 to before 10.0.17763.9245 Fixed in 10.0.17763.9245 Patch available CNA
  • Windows Server 2019 (Server Core installation) VendorMicrosoft Affected 10.0.17763.0 to before 10.0.17763.9245 Fixed in 10.0.17763.9245 Patch available CNA
  • Windows Server 2022 VendorMicrosoft Affected 10.0.20348.0 to before 10.0.20348.5622 Fixed in 10.0.20348.5622 Patch available CNA
  • Windows Server 2025 VendorMicrosoft Affected 10.0.26100.0 to before 10.0.26100.33438 Fixed in 10.0.26100.33438 Patch available CNA
  • Windows Server 2025 (Server Core installation) VendorMicrosoft Affected 10.0.26100.0 to before 10.0.26100.33438 Fixed in 10.0.26100.33438 Patch available CNA

CPE names Threatist (inferred) · 4

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:microsoft:365_apps:*:*:*:*:*:*:*:*——Microsoft
cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*——Microsoft
cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:*:*——Microsoft
cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*——Microsoft
  • cpe:2.3:a:microsoft:365_apps:*:*:*:*:*:*:*:* Versions — — ·Microsoft
  • cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:* Versions — — ·Microsoft
  • cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:*:* Versions — — ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:* Versions — — ·Microsoft

Remediation

Microsoft 11 updates

  • KB5124012
    Security Update
    • Windows 11 Version 26H1 for ARM64-based Systems 10.0.28000.2954
    • Windows 11 version 26H1 for x64-based Systems 10.0.28000.2954
  • KB5124008
    Security Update
    • Windows 11 Version 24H2 for ARM64-based Systems 10.0.26100.9445
    • Windows 11 Version 24H2 for x64-based Systems 10.0.26100.9445
    • Windows 11 Version 25H2 for ARM64-based Systems 10.0.26200.9445
    • Windows 11 Version 25H2 for x64-based Systems 10.0.26200.9445
  • KB5123066
    Security Update
    • Windows Server 2012 R2 6.3.9600.23398
    • Windows Server 2012 R2 (Server Core installation) 6.3.9600.23398
Show 8 more Microsoft updates
  • KB5123065
    Security Update
    • Windows Server 2012 6.2.9200.26349
    • Windows Server 2012 (Server Core installation) 6.2.9200.26349
  • KB5122882
    Security Update
    • Windows Server 2022 10.0.20348.5622
    • Windows Server 2022 (Server Core installation) 10.0.20348.5622
  • KB5122880
    Security Update
    • Windows 11 Version 23H2 for ARM64-based Systems 10.0.22631.7582
    • Windows 11 Version 23H2 for x64-based Systems 10.0.22631.7582
  • KB5122878
    Security Update
    • Windows 10 Version 21H2 for 32-bit Systems 10.0.19044.7725
    • Windows 10 Version 21H2 for ARM64-based Systems 10.0.19044.7725
    • Windows 10 Version 21H2 for x64-based Systems 10.0.19044.7725
    • Windows 10 Version 22H2 for 32-bit Systems 10.0.19045.7725
    • Windows 10 Version 22H2 for ARM64-based Systems 10.0.19045.7725
    • Windows 10 Version 22H2 for x64-based Systems 10.0.19045.7725
  • KB5122876
    Security Update
    • Windows 10 Version 1809 for 32-bit Systems 10.0.17763.9245
    • Windows 10 Version 1809 for x64-based Systems 10.0.17763.9245
    • Windows Server 2019 10.0.17763.9245
    • Windows Server 2019 (Server Core installation) 10.0.17763.9245
  • KB5122874
    Servicing Stack Update
    • Windows 10 Version 1607 for 32-bit Systems 10.0.14393.9504
    • Windows 10 Version 1607 for x64-based Systems 10.0.14393.9504
    • Windows Server 2016 10.0.14393.9504
    • Windows Server 2016 (Server Core installation) 10.0.14393.9504
  • KB5122871
    Security Update
    • Windows Server 2025 10.0.26100.33438
    • Windows Server 2025 (Server Core installation) 10.0.26100.33438
  • KB5002916
    Security Update
    • Microsoft Office 2016 (32-bit edition) 16.0.5569.1000, 16.0.5569.1003
    • Microsoft Office 2016 (64-bit edition) 16.0.5569.1000, 16.0.5569.1003
    • Microsoft Word 2016 (32-bit edition) 16.0.5569.1003
    • Microsoft Word 2016 (64-bit edition) 16.0.5569.1003

Vendor assessments

Microsoft

Microsoft's page for this CVE →

Impact
Remote Code Execution
Exploited
No
Publicly disclosed
No
Exploitability
Exploitation Unlikely
ProductStatusPlan or fix
Microsoft 365 Apps for Enterprise for 32-bit SystemsFixed 16.0.20326.20138 · Security Update
Microsoft 365 Apps for Enterprise for 64-bit SystemsFixed 16.0.20326.20138 · Security Update
Microsoft Office 2019 for 32-bit editionsFixed 16.0.10417.20207 · Security Update
Microsoft Office 2019 for 64-bit editionsFixed 16.0.10417.20207 · Security Update
Microsoft Office 365 for MacFixed 16.113.26091433 · Security Update
Microsoft Office LTSC 2021 for 32-bit editionsFixed 16.0.14334.20906 · Security Update
Microsoft Office LTSC 2021 for 64-bit editionsFixed 16.0.14334.20906 · Security Update
Microsoft Office LTSC 2024 for 32-bit editionsFixed 16.0.17932.20976 · Security Update
Microsoft Office LTSC 2024 for 64-bit editionsFixed 16.0.17932.20976 · Security Update
Microsoft Office LTSC for Mac 2021Fixed 16.113.26091433 · Security Update
Microsoft Office LTSC for Mac 2024Fixed 16.113.26091433 · Security Update

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-81955
  2. 2026-10-03 Alias added: GHSA-g5v3-7q65-84f8

References

Patch 1

  • TI-2026-42212 Microsoft SharePoint Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
  • TI-2026-37256 Microsoft SharePoint Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
  • TI-2026-26194 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
  • TI-2026-16982 Microsoft SharePoint Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-36863 Windows Server Update Service (WSUS) Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-33671 Microsoft SharePoint Server Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
See all 18045 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences