Synced 30 Sept 2026 20:54 UTC Account
← All products

CVE-2026-45606

MEDIUM severity · CVSS 5.5 · Out-of-bounds read
5.5CVSS MEDIUM

Summary

Out-of-bounds read in Microsoft UxTheme Library (uxtheme.dll) allows an authorized attacker to deny service locally.

Impact & exploitability

Attack vectorLocal
Attack complexityLow
Privileges requiredLow
User interactionNone
Confidentiality impactNone
Integrity impactNone
Availability impactHigh
Exploit probability (EPSS)0%

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.