CVE-2026-83523 - Vulnerability Details

- Windows Image Acquisition Remote Code Execution Vulnerability

Description

Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.

Published: 2026-10-13

Score: 8.8 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

A heap-based buffer overflow occurs within the Windows Image Acquisition component, allowing an unauthorized attacker to send specially crafted network requests that trigger the overflow and execute arbitrary code on the affected system.

Affected Systems

The vulnerability affects Microsoft Windows 11 versions 24H2, 25H2, 26H2, and 26H1, as well as Microsoft Windows Server 2025 including the Server Core edition.

Risk and Exploitability

The flaw carries a CVSS score of 8.8, indicating high severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires network connectivity to the target and the WIA service in service, which suggests the attack can be launched remotely against systems that expose Windows Image Acquisition over the network.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Microsoft

Windows 11 Version 24H2

affected

Version	Status	Constraints
`10.0.26100.0`	affected	< 10.0.26100.9711

Microsoft

Windows 11 Version 25H2

affected

Version	Status	Constraints
`10.0.26200.0`	affected	< 10.0.26200.9711

Microsoft

Windows 11 version 26H1

affected

Version	Status	Constraints
`10.0.28000.0`	affected	< 10.0.28000.3231

Microsoft

Windows 11 Version 26H2

affected

Version	Status	Constraints
`10.0.26300.0`	affected	< 10.0.26300.9711

Microsoft

Windows Server 2025

affected

Version	Status	Constraints
`10.0.26100.0`	affected	< 10.0.26100.33650

Microsoft

Windows Server 2025 (Server Core installation)

affected

Version	Status	Constraints
`10.0.26100.0`	affected	< 10.0.26100.33650

Configuration 1 [-]

OR	cpe:2.3:o:microsoft:windows_11_24h2:::::::arm64:*
	cpe:2.3:o:microsoft:windows_11_24h2:::::::x64:*
	cpe:2.3:o:microsoft:windows_11_25h2:::::::arm64:*
	cpe:2.3:o:microsoft:windows_11_25h2:::::::x64:*
	cpe:2.3:o:microsoft:windows_11_26h1:::::::arm64:*
	cpe:2.3:o:microsoft:windows_11_26h1:::::::x64:*
	cpe:2.3:o:microsoft:windows_11_26h2:::::::arm64:*
	cpe:2.3:o:microsoft:windows_11_26h2:::::::x64:*
	cpe:2.3:o:microsoft:windows_server_2025:::::::x64:*

No data.

Vendor Product Confidence Versions

Microsoft

Windows 11 24h2

100%

Version	Status	Scheme	Platform
`[10.0.26100.0,10.0.26100.9711)`	affected	generic	['arm64-based_systems', 'x64-based_systems']

Microsoft

Windows 11 25h2

100%

Version	Status	Scheme	Platform
`[10.0.26200.0,10.0.26200.9711)`	affected	generic	['arm64-based_systems', 'x64-based_systems']

Microsoft

Windows 11 26h1

100%

Version	Status	Scheme	Platform
`[10.0.28000.0,10.0.28000.3231)`	affected	generic	['arm64-based_systems', 'x64-based_systems']

Microsoft

Windows 11 26h2

100%

Version	Status	Scheme	Platform
`[10.0.26300.0,10.0.26300.9711)`	affected	generic	['arm64-based_systems', 'x64-based_systems']

Microsoft

Windows Server 2025

100%

Version	Status	Scheme	Platform
`[10.0.26100.0,10.0.26100.33650)`	affected	generic	['x64-based_systems']

Microsoft

Windows Server 2025 (server Core Installation)

100%

Version	Status	Scheme	Platform
`[10.0.26100.0,10.0.26100.33650)`	affected	generic	['x64-based_systems']

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Apply the latest cumulative security update for Windows 11 and Windows Server 2025 that addresses CVE-2026-83523 via the Microsoft Update Catalog or Windows Update service.
Configure the Windows Image Acquisition service to run with the least privileges necessary and disable it if image acquisition is not required for the environment.
Apply network segmentation or firewall rules to restrict inbound access to the WIA service, limiting exposure to trusted internal networks.

Generated by OpenCVE AI on October 14, 2026 at 03:41 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00928.

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83523

History

Thu, 29 Oct 2026 18:30:00 +0000

Type	Values Removed	Values Added
CPEs		cpe:2.3:o:microsoft:windows_11_24h2:::::::arm64:* cpe:2.3:o:microsoft:windows_11_24h2:::::::x64:* cpe:2.3:o:microsoft:windows_11_25h2:::::::arm64:* cpe:2.3:o:microsoft:windows_11_25h2:::::::x64:* cpe:2.3:o:microsoft:windows_11_26h1:::::::arm64:* cpe:2.3:o:microsoft:windows_11_26h1:::::::x64:* cpe:2.3:o:microsoft:windows_11_26h2:::::::arm64:* cpe:2.3:o:microsoft:windows_11_26h2:::::::x64:* cpe:2.3:o:microsoft:windows_server_2025:::::::x64:*

Sun, 18 Oct 2026 06:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Microsoft windows 11 24h2 Microsoft windows 11 25h2 Microsoft windows 11 26h1 Microsoft windows 11 26h2 Microsoft windows Server 2025 (server Core Installation)
Vendors & Products		Microsoft windows 11 24h2 Microsoft windows 11 25h2 Microsoft windows 11 26h1 Microsoft windows 11 26h2 Microsoft windows Server 2025 (server Core Installation)

Tue, 13 Oct 2026 22:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Tue, 13 Oct 2026 19:15:00 +0000

Type	Values Removed	Values Added
Description		Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.
Title		Windows Image Acquisition Remote Code Execution Vulnerability
First Time appeared		Microsoft Microsoft windows 11 24h2 Microsoft windows 11 25h2 Microsoft windows 11 26h1 Microsoft windows 11 Version 26h2 For Arm64-based Systems Microsoft windows Server 2025
Weaknesses		CWE-122
CPEs		cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:::::::: cpe:2.3:o:microsoft:windows_11_24H2:::::::arm64:* cpe:2.3:o:microsoft:windows_11_25H2:::::::arm64:* cpe:2.3:o:microsoft:windows_11_26H1:::::::x64:* cpe:2.3:o:microsoft:windows_server_2025::::::::
Vendors & Products		Microsoft Microsoft windows 11 24h2 Microsoft windows 11 25h2 Microsoft windows 11 26h1 Microsoft windows 11 Version 26h2 For Arm64-based Systems Microsoft windows Server 2025
References		https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83523
Metrics		cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C'}`

Subscriptions

Microsoft Windows 11 24h2 Windows 11 24h2 Windows 11 25h2 Windows 11 25h2 Windows 11 26h1 Windows 11 26h1 Windows 11 26h2 Windows 11 Version 26h2 For Arm64-based Systems Windows Server 2025 Windows Server 2025 (server Core Installation)

MITRE

Status: PUBLISHED

Assigner: microsoft

Published: 2026-10-13T19:00:47.758Z

Updated: 2026-10-31T18:08:22.414Z

Reserved: 2026-08-31T15:57:21.155Z

Link: CVE-2026-83523

Vulnrichment

Updated: 2026-10-13T20:40:41.767Z

NVD

Status : Analyzed

Published: 2026-10-13T19:19:58.450

Modified: 2026-10-29T18:24:23.233

Link: CVE-2026-83523

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-10-18T06:45:02Z

Weaknesses

CWE-122
Heap-based Buffer Overflow

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Exploitation none

Automatable no

Technical Impact total

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object