Is CVE-2026-27168 actively exploited?

No active exploitation of CVE-2026-27168 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-27168 be exploited remotely?

Partially. CVE-2026-27168 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2026-27168?

CVE-2026-27168 has a CVSS score of 8.8 (HIGH) and an EPSS exploitation probability of 0.02%.

HOME VULNERABILITIESCVE-2026-27168

HIGH

CVE-2026-27168

CWE-122Published: February 21, 2026· Updated: Feb 23, 2026

8.8

CVSS v3.1

EPSS:0.02%probability of exploitation in 30 daysPercentile:3.6th

Official Description

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. All versions are vulnerable to Heap-based Buffer Overflow through the XWD parser's use of the bytes_per_line value. The value os read directly from the file as the read size in io->strict_read(), and is never compared to the actual size of the destination buffer. An attacker can provide an XWD file with an arbitrarily large bytes_per_line, causing a massive write operation beyond the buffer heap allocated for the image pixels. The issue did not have a fix at the time of publication.

NVD Source

Technical Analysis

CVE-2026-27168 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 8.8.