Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 14 products
| Date | Total | Labels |
|---|
| 2026-05-12 | 1 | Patch1 |
| 2026-05-13 | 2 | General2 |
| 2026-06-24 | 1 | Disclosure1 |
On sait enfin pourquoi Ordinals est mort : la CVE-2026-35421 dans Windows est particulièrement préoccupante. Une attaque peut être menée en ouvrant simplement un fichier dans Microsoft Paint.. Sorry il fallait pas utiliser micro$oft pour vos jpeg Bitcoin
Post summary
The post highlights CVE‑2026‑35421 as a concern but offers no technical details, PoC, patch info, or evidence of active exploitation.
🚨Fortinet、FortiSandboxとFortiAuthenticatorの重大なRCE脆弱性について警告（CVE-2026-44277、CVE-2026-26083） 🩹マイクロソフト、5月の月例パッチで脆弱性120件を修正 ゼロデイは含まれず（CVE-2026-35421、CVE-2026-40365他） 〜サイバーアラート5月13日〜 https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/45561/
Post summary
An alert highlights major Fortinet RCE vulnerabilities and notes Microsoft’s patch release, but lacks exploit or active exploitation details.
Windows and Infrastructure Windows Client and Server also receive notable fixes: CVE-2026-35421 (GDI RCE, Critical) — Microsoft Paint can be weaponized to trigger RCE when users open malicious Enhanced Metafile (.emf) files CVE-2026-41096 (DNS Client RCE, Important) — An…
Post summary
This notice announces CVE‑2026‑35421, a critical GDI‑based remote code execution flaw in Microsoft Paint triggered by malicious .emf files, but it does not provide PoC, exploit, or patch details.
🚨 CVE-2026-35421 is “GDI RCE” — the graphics subsystem edition of Windows panic. Patch first, ask questions later: attackers love easy remote reach, defenders love signal. #Windows #Security https://windowsforum.com/threads/cve-2026-35421-windows-gdi-rce-patch-fast-triage-calm-no-exploit-guesswork.417798/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #RemoteCodeExecution #PatchManagement #WindowsGdi #Cve202635421 https://t.co/fnOinAP57w
Post summary
The tweet announces CVE-2026-35421, identifies it as a GDI remote code execution flaw, and urges users to apply the patch immediately, with no exploit or active exploitation evidence provided.
25 of 25 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | microsoft | windows_10_1607 | - | - | x64 |
| OS | microsoft | windows_10_1607 | - | - | x86 |
| OS | microsoft | windows_10_1809 | - | - | x64 |
| OS | microsoft | windows_10_1809 | - | - | x86 |
| OS | microsoft | windows_10_21h2 | - | - | arm64 |
| OS | microsoft | windows_10_21h2 | - | - | x64 |
| OS | microsoft | windows_10_21h2 | - | - | x86 |
| OS | microsoft | windows_10_22h2 | - | - | arm64 |
| OS | microsoft | windows_10_22h2 | - | - | x64 |
| OS | microsoft | windows_10_22h2 | - | - | x86 |
| OS | microsoft | windows_11_23h2 | - | - | arm64 |
| OS | microsoft | windows_11_23h2 | - | - | x64 |
| OS | microsoft | windows_11_24h2 | - | - | arm64 |
| OS | microsoft | windows_11_24h2 | - | - | x64 |
| OS | microsoft | windows_11_25h2 | - | - | arm64 |
| OS | microsoft | windows_11_25h2 | - | - | x64 |
| OS | microsoft | windows_11_26h1 | - | - | arm64 |
| OS | microsoft | windows_11_26h1 | - | - | x64 |
| OS | microsoft | windows_server_2012 | - | - | - |
| OS | microsoft | windows_server_2012 | r2 | - | - |
| OS | microsoft | windows_server_2016 | - | - | - |
| OS | microsoft | windows_server_2019 | - | - | - |
| OS | microsoft | windows_server_2022 | - | - | - |
| OS | microsoft | windows_server_2022_23h2 | - | - | - |
| OS | microsoft | windows_server_2025 | - | - | - |