PULSEUnderground Intel

LIVE18signals / 24h

FEED

ransomqilin reclama a Wanted · NL · Not Foundransomsilentransomgroup reclama a R...er · Not Foundransomsilentransomgroup reclama a R... D... · Not Foundransomspacebears reclama a Basso Fedele & Figli S.r.l. (Olio Basso) / Villa Raiano · IT · Agriculture and Food Productionransomgenesis reclama a **E*** · US · Not Foundransomorova reclama a Ganzhou Xinye Craft Co., Ltd. · HK · Manufacturingransompanzer reclama a Xpress Tech · Technologyransomqilin reclama a G.M.A. GRANDI MARCHE AUTOMOBILI - S.R.L · IT · Transportationransomqilin reclama a Crown Group · PK · Otherransomdragonforce reclama a QPC Global · GB · Otherransominterlock reclama a AngMar Companies · Not Foundransompayload reclama a B&B Hydraulik · DE · Manufacturingransompayload reclama a Stücheli Architekten · CH · Professional Servicesransompayload reclama a Baya Technologies · Technologyransomqilin reclama a Wanted · NL · Not Foundransomsilentransomgroup reclama a R...er · Not Foundransomsilentransomgroup reclama a R... D... · Not Foundransomspacebears reclama a Basso Fedele & Figli S.r.l. (Olio Basso) / Villa Raiano · IT · Agriculture and Food Productionransomgenesis reclama a **E*** · US · Not Foundransomorova reclama a Ganzhou Xinye Craft Co., Ltd. · HK · Manufacturingransompanzer reclama a Xpress Tech · Technologyransomqilin reclama a G.M.A. GRANDI MARCHE AUTOMOBILI - S.R.L · IT · Transportationransomqilin reclama a Crown Group · PK · Otherransomdragonforce reclama a QPC Global · GB · Otherransominterlock reclama a AngMar Companies · Not Foundransompayload reclama a B&B Hydraulik · DE · Manufacturingransompayload reclama a Stücheli Architekten · CH · Professional Servicesransompayload reclama a Baya Technologies · Technology

CVE WatchAug 11, 2026

CVE-2026-62709

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.

CVSS

5.5

Medium

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Aug 11, 2026 · Last modified: Aug 11, 2026 · CWE-908

EPSS · 30d

Not enough EPSS history yet.

Technical description

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.

Official references

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62709

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-703175.5 MED

———Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.15h CVE-2026-687995.5 MED

———Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.12h CVE-2026-627405.5 MED

———Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally.11h CVE-2026-591375.5 MED

———Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.11h CVE-2026-591365.5 MED

———Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.11h CVE-2026-582475.3 MED

——0SAP ABAP Platform allows an unauthenticated user to send a specially crafted request to an internal component. This could disclose limited, non-sensitive data from previously used memory, leading to a low on confidentiality, with no impact on integrity and availability of the application.18h