Skip to content
Heist/ feed
Back to feed
Unrated

CVE-2026-105731 Microsoft Office Graphics Component Information Disclosure Vulnerability

Type: advisorySources: Microsoft security updates

An authorized attacker may disclose information locally through use of an uninitialized resource in the Microsoft Graphics Component.

Products
Microsoft Graphics Component
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2026-105731
Confirmed fixed CVEs
Not specified
Updated in this feed
3 Nov 2026, 15:10 UTC · Revision 1

Source evidence

CVE-2026-105731 Microsoft Office Graphics Component Information Disclosure Vulnerability

official-microsoft-security-updates · Original source

Published 13 Oct 2026, 14:00 UTC

An authorized attacker may disclose information locally through use of an uninitialized resource in the Microsoft Graphics Component.

Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally.

Microsoft Graphics Component

Fixed versions: Not specified

Prerequisites: an authorized attacker

Complete source record
{
  "id": "b77f1098829b55ce1fe127aa0c4966158d73b7fe1b75eeaaf5b4a633076dbf92",
  "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105731",
  "method": "llm",
  "payload": {
    "kind": "advisory",
    "title": "CVE-2026-105731 Microsoft Office Graphics Component Information Disclosure Vulnerability",
    "summary": "An authorized attacker may disclose information locally through use of an uninitialized resource in the Microsoft Graphics Component.",
    "evidence": "Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally.",
    "products": [
      {
        "name": {
          "value": "Microsoft Graphics Component",
          "evidence": "Use of uninitialized resource in Microsoft Graphics Component"
        },
        "prerequisites": [
          {
            "value": "an authorized attacker",
            "evidence": "allows an authorized attacker to disclose information locally"
          }
        ],
        "fixed_versions": [],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-105731",
        "evidence": "CVE-2026-105731 Microsoft Office Graphics Component Information Disclosure Vulnerability"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-microsoft-security-updates",
  "document_id": 24770,
  "published_at": "2026-10-13T14:00:00+00:00"
}