Skip to content
OpenAdvisories
High MSRC-CVE-2026-62740 1 CVE

Windows Imaging Component Information Disclosure Vulnerability

Published Aug 11, 2026 · Updated Oct 28, 2026 · Revision 2

Vendor: Microsoft

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What type of information could be disclosed by this vulnerability?
The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized heap memory.

Security updates
10.0.17763.9121 — https://support.microsoft.com/help/5120238
10.0.20348.5499 — https://support.microsoft.com/help/5120242
10.0.20348.5440 — https://support.microsoft.com/help/5120229
10.0.19044.7663 — https://support.microsoft.com/help/5120249
10.0.26100.33296 — https://support.microsoft.com/help/5120233
10.0.26100.33222 — https://support.microsoft.com/help/5120228
10.0.26200.9168 — https://support.microsoft.com/help/5121003
10.0.26200.9106 — https://support.microsoft.com/help/5120994
10.0.22631.7517 — https://support.microsoft.com/help/5120240
10.0.28000.2704 — https://support.microsoft.com/help/5121000
10.0.14393.9418 — https://support.microsoft.com/help/5120418
6.2.9200.26280 — https://support.microsoft.com/help/5120386
6.3.9600.23338 — https://support.microsoft.com/help/5120385
16.0.20430.20000 — https://support.microsoft.com/en-us/microsoft-365
16.112.26090911 — https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac

Vulnerabilities 1

Revision history

  1. #2

    Added supported editions of Microsoft Office to the Security Updates table because they are affected by this vulnerability. Microsoft recommends that customers running any of these editions of Office install the latest security updates to be fully protected from this vulnerability.

  2. #1

    Information published.

References