PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-44812 Microsoft CVE debrief

CVE-2026-44812 is a high-severity vulnerability in Windows Win32K - GRFX that allows local code execution. Published on June 9, 2026, and modified on June 17, 2026, this vulnerability has a CVSS score of 7.8. It is caused by an integer overflow or wraparound in the Windows Win32K - GRFX component. An unauthorized attacker can exploit this vulnerability to execute code locally. Multiple Windows versions and products are affected, including Windows 10, Windows 11, and Windows Server.

Vendor
Microsoft
Product
Microsoft Excel for Android
CVSS
HIGH 7.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-09
Original CVE updated
2026-06-19
Advisory published
2026-06-09
Advisory updated
2026-06-19

Who should care

Administrators and users of Windows 10, Windows 11, and Windows Server should be aware of this vulnerability. Given its high severity and potential for local code execution, immediate attention is required to mitigate the risk.

Technical summary

The vulnerability is caused by an integer overflow or wraparound in the Windows Win32K - GRFX component. This allows an attacker to execute code locally, potentially leading to privilege escalation or other malicious activities. The CVSS vector for this vulnerability is CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a high severity. Affected products include Microsoft Office applications (Excel, PowerPoint, Word) on Android, and various versions of Windows 10, Windows 11, and Windows Server.

Defensive priority

High

Recommended defensive actions

  • Apply patches from Microsoft as soon as available.
  • Use secure coding practices when developing applications.
  • Implement the principle of least privilege for users and processes.
  • Monitor systems for suspicious activity.
  • Use antivirus software and keep it up-to-date.
  • Limit local access to sensitive systems and data.
  • Regularly review and update system configurations.

Evidence notes

The information provided is based on data from the National Vulnerability Database (NVD) and Microsoft's security advisories. The CVE record and NVD detail pages provide comprehensive information about the vulnerability, including its description, CVSS score, and affected products.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-44812 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-44812

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-44812 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-44812

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.