CVE-2026-69586

CVE-2026-69586 is an integer overflow or wraparound flaw (CWE-190) in the Microsoft Windows PDF component that leads to a memory corruption condition (CWE-122) when the component processes crafted PDF data. Per Microsoft's scoring, an unauthenticated network attacker can trigger it remotely without privileges or user interaction, although the affected version ranges are not specified in the available data. Successful exploitation allows the attacker to execute arbitrary code on the target system, with the CVSS score indicating full confidentiality, integrity, and availability impact. Any system running the affected Windows PDF component is exposed, which in practice means an extremely large share of the Windows installed base. Exploitation status: no public proof-of-concept, not listed in CISA KEV, and an EPSS probability of about 1.0% over the next 30 days, indicating no known in-the-wild exploitation so far.

What to do: Install Microsoft's security update for CVE-2026-69586 as soon as it is published (Patch Tuesday release), and verify applicability against your Windows builds since no version ranges are provided in this data. Until patching, avoid opening untrusted PDFs and limit automated PDF preview or processing where feasible. With no public PoC or known exploitation, patch in the normal maintenance cycle but do not defer past the next available update.