CVE-2026-62740
Microsoft Windows 10 1607: information disclosure
- Risk score
- 55/100
- CVSS
- 5.5 v3.1
- Exploit chance (30 days)
- 0.4%
- Published
- 11 Aug 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally.
- Affected
- Microsoft Windows 10 1607
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Story map
At a glance
Microsoft Windows 10 1607: Red, act today. Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
The flaws
- CVE-2026-62740: Information disclosure (CVSS 5.5 · EPSS 0%)
- CVE-2026-100202: Use-after-free (CVSS 9.8 · EPSS 1%)
- CVE-2026-100222: Heap buffer overflow (CVSS 9.8 · EPSS 1%)
- CVE-2026-100220: Heap buffer overflow (CVSS 8.8 · EPSS 1%)
The fix
Fix: Apply the vendor's security update; see the linked advisory.
Who is exposed: Microsoft Windows 10 1607
Where it stands
- No known exploitation
How it unfolded
- 28 Oct, Microsoft Security Response Center (official): CVE-2026-62740 Windows Imaging Component Information Disclosure Vulnerability
Connects to
- Same weakness: CWE-908 (CWE-908). 34 other warnings in 30 days
- Same product: Earlier Microsoft Windows 10 1607 warnings. 397 in the last 90 days
Why it is Yellow
- CVSS 5.5 medium
- On your watchlist: windows server
- Named in a government or vendor bulletin
Government and vendor bulletins
References
Original description
Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally.
Last activity 28 Oct 2026. Patch Forecast updates every hour.