High MSRC-CVE-2026-54984 1 CVE

Windows Imaging Component Remote Code Execution Vulnerability

Published Aug 11, 2026 · Updated Aug 11, 2026

Vendor: Microsoft

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

Details

Security updates
10.0.17763.9121 — https://support.microsoft.com/help/5120238
10.0.20348.5499 — https://support.microsoft.com/help/5120242
10.0.20348.5440 — https://support.microsoft.com/help/5120229
10.0.19044.7663 — https://support.microsoft.com/help/5120249
10.0.26100.33296 — https://support.microsoft.com/help/5120233
10.0.26100.33222 — https://support.microsoft.com/help/5120228
10.0.26200.9168 — https://support.microsoft.com/help/5121003
10.0.26200.9106 — https://support.microsoft.com/help/5120994
10.0.22631.7517 — https://support.microsoft.com/help/5120240
10.0.28000.2704 — https://support.microsoft.com/help/5121000
10.0.14393.9418 — https://support.microsoft.com/help/5120418
6.2.9200.26280 — https://support.microsoft.com/help/5120386
6.3.9600.23338 — https://support.microsoft.com/help/5120385

Vulnerabilities 1

High 7.8

CVE-2026-54984 Public exploit

Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 11, 2026

Revision history

2026-08-11 #1
Information published.

References

CVE-2026-54984 Windows Imaging Component Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54984
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss