CVE-2026-122163

HighCVSS 7.5/10Last modified Nov 10, 2026

Description

Double free in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-415

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 10, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1221648.0Weak authentication in Windows Kerberos allows an authorized attacker to elevate privileges over a network.CVE-2026-1221657.8Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.CVE-2026-1221667.8Stack-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.CVE-2026-1221676.8Heap-based buffer overflow in Windows USB Driver allows an unauthorized attacker to elevate privileges with a physical attack.CVE-2026-1221687.8Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.CVE-2026-1221697.5Insufficient granularity of access control in Windows IKE Extension allows an authorized attacker to perform spoofing locally.CVE-2026-122177.8A security vulnerability has been detected in DVDFab Virtual Drive 2.0.0.5. Impacted is an unknown function in the library dvdfabio.sys of tCVE-2026-1221707.0Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.CVE-2026-1221718.8Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to execute code over a network.CVE-2026-1221727.8Use after free in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.CVE-2026-1221736.8Heap-based buffer overflow in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.CVE-2026-1221747.0Improper link resolution before file access ('link following') in Windows Task Scheduler allows an authorized attacker to elevate privileges
CVE-2026-122163: High severity, CVSS 7.5 | Vulnix