CVE-2025-53799: Windows Imaging Component Information Disclosure Vulnerability

Recommended actionScheduled

Medium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.

Patch available

What, why and how

Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.

What

Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.

Why

The product uses or accesses a resource that has not been initialized.

How

An attacker operating through local access may attempt exploitation without authentication after a user interaction. If successful, the issue may cause the confidentiality, integrity or availability impact described by the vendor.

What

Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.

Why

The product uses or accesses a resource that has not been initialized.

How

Exploit reality and attack path

CVSS severity, EPSS forecast probability, public exploit material and CISA-confirmed exploitation are separate signals.

Observed exploitation

Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.

No confirmed evidence

No CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.

Public PoC / exploit material

Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.

None recorded

No exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.

Likely attack path: local access → Use of Uninitialized Resource → cause the confidentiality, integrity or availability impact described by the vendor
Attack surface: Local
Privileges required: None: unauthenticated exploitation is possible
User interaction: Required interaction required
Attack complexity: Low: no specialised conditions are recorded
Security boundary: Unchanged: impact remains within the vulnerable component's security authority
Weakness ? CWE means Common Weakness Enumeration: a standard category for the underlying weakness.: CWE-908 ↗
CWE-908: Use of Uninitialized Resource. The product uses or accesses a resource that has not been initialized.
CVSS vector ? CVSS means Common Vulnerability Scoring System. The vector records the metric values used to calculate technical severity.: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Common Vulnerability Scoring System 3.1: the compact vector below is decoded into plain language.
AVLocalAttack vector: The attacker needs local access to the vulnerable system.ACLowAttack complexity: No specialised conditions are required beyond attacker-controlled input.PRNonePrivileges required: The attacker does not need an account or existing privileges.UIRequiredUser interaction: Another user must perform an action for exploitation to succeed.SUnchangedScope: The security impact remains within the vulnerable component's authority.CHighConfidentiality impact: A successful attack can cause a major loss.INoneIntegrity impact: No direct loss is represented by this metric.ANoneAvailability impact: No direct loss is represented by this metric.
Post-exploitation / living off the land: The issue can support a local privilege or sandbox boundary transition; normal system utilities may then be available in the gained context.

UnauthenticatedCWE-908

Official authority intelligence

Only matched European and national findings are included. Language selectors and unavailable sources are omitted.

ENISA EUVD · EUVD-2025-27331Official EUVD mapping

0 linked advisory records.

Official EUVD record ↗

BSI · German · WID-SEC-2025-2005Microsoft Windows und Windows Server: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows und Microsoft Windows Server ausnutzen, um seine Privilegien zu erhöhen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.

Official advisory ↗

BSI · German · WID-SEC-2025-2003Microsoft Office Produkte: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Microsoft Office Produkte ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, und um seine Privilegien zu erhöhen.

Official advisory ↗

Cyber Security Agency of Singapore · English · CSA-SB-20250910Security Bulletin 10 SEP 2025

The Cyber Security Agency of Singapore included this CVE in its official Security Bulletin 10 SEP 2025, published on 10 September 2025. Open the linked bulletin for the product, severity and reference information published in that issue.

Official advisory ↗

CERT-FR · French · CERTFR-2025-AVI-0778Multiples vulnérabilités dans Microsoft Windows

0778 Affaire suivie par: CERT-FR Avis du CERT-FR Objet: Multiples vulnérabilités dans Microsoft Windows Gestion du document Référence CERTFR-2025-AVI-0778 Titre Multiples vulnérabilités dans Microsoft Windows Date de la première version 10 septembre 2025 Date de la dernière version 10 septembre 2025 Source(s) Bulletin de sécurité Microsoft Windows CVE-2025-49734 du 09 septembre 2025 Bulletin de sécurité Microsoft Windows CVE-2025-53796 du 09 septembre 2025 Bulletin de sécurité Microsoft Windows CVE-2025-53797 du 09 septembre 2025 Bulletin de sécurité Microsoft Windows CVE-2025-53798 du 09 septembre 2025 Bulletin de sécurité Microsoft Windows CVE-2025-53799 du 09 septembre 2025 Bulletin de sécurité Microsoft Windows CVE-2025-53800 du 09 septembre 2025 Bulletin de sécurité Microsoft Windows CVE-2025-53801 du 09 septembre 2025 Bulletin de sécurité Microsoft Windows CVE-2025-53802 du 09 septembre 2025 Bulletin de sécurité Microsoft Windows CVE-2025-53803 du 09 septembre 2025 Bulletin de sécurité Microsoft Windows CVE-2025-53804 du 09 septembre 2025 Bulletin de sécurité Microsoft Windows CVE-2025-53805 du 09 septembre 2025 Bulletin de sécurité Microsoft Windows CVE-2025-53806 du 09 septembre 2025 Bulletin de sécurité Microsoft Windows CVE-2025-53807 du 09 septembre 2025 Bulletin de sécurité Microso

Official advisory ↗

CERT-FR · French · CERTFR-2025-AVI-0777Multiples vulnérabilités dans Microsoft Office

De multiples vulnérabilités ont été découvertes dans Microsoft Office. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et un contournement de la politique de sécurité.

Official advisory ↗

JVN iPedia · Japanese · JVNDB-2025-015402マイクロソフトの複数の Microsoft 製品における情報を公開される脆弱性

マイクロソフトの複数の Microsoft 製品には、Windows Imaging Component に不備があるため、情報を公開される脆弱性が存在します。

Official advisory ↗

KISA KrCERT/CC · Korean · KNVD-6581MS 9월 보안 위협에 따른 정기 보안 업데이트 권고

Official advisory ↗

NCSC-NL · Dutch · NCSC-2025-0278Kwetsbaarheden verholpen in Microsoft Office

Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade: - Uitvoeren van willekeurige code (Gebruikersrechten) - Toegang tot gevoelige gegevens - Verkrijgen van verhoogde rechten - Voordoen als andere gebruiker Voor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen. ``` Microsoft Office: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54906 | 7.80 | Uitvoeren van willekeurige code | | CVE-2025-55243 | 7.50 | Voordoen als andere gebruiker | | CVE-2025-54910 | 8.40 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Microsoft Office Word: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54905 | 7.10 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Microsoft Office Visio: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54907 | 7.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Imaging Component: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-53799 | 5.50 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Microsoft Office PowerPoint: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54908 | 7.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Microsoft AutoUpdate (MAU): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-55317 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Microsoft Office SharePoint: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54897 | 8.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Microsoft Office Excel: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54896 | 7.80 | Uitvoeren van willekeurige code | | CVE-2025-54898 | 7.80 | Uitvoeren van willekeurige code | | CVE-2025-54899 | 7.80 | Uitvoeren van willekeurige code | | CVE-2025-54902 | 7.80 | Uitvoeren van willekeurige code | | CVE-2025-54903 | 7.80 | Uitvoeren van willekeurige code | | CVE-2025-54904 | 7.80 | Uitvoeren van willekeurige code | | CVE-2025-54900 | 7.80 | Uitvoeren van willekeurige code | | CVE-2025-54901 | 5.50 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| ```

Official advisory ↗

NCSC-NL · Dutch · NCSC-2025-0277Kwetsbaarheden verholpen in Microsoft Windows

Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade: - Denial-of-Service (DoS) - Omzeilen van een beveiligingsmaatregel - Uitvoer van willekeurige code (root/adminrechten) - Uitvoer van willekeurige code (gebruikersrechten) - Toegang tot systeemgegevens - Toegang tot gevoelige gegevens - Verkrijgen van verhoogde rechten Van de kwetsbaarheid met kenmerk CVE-2025-55234 geeft Microsoft aan dat details publiek bekend zijn. Er is (nog) geen Proof-of-Concept-code (PoC) of exploit beschikbaar. De kwetsbaarheid bevindt zich in SMB en stelt een ongeauthenticeerde kwaadwillende in staat om zich de rechten van het slachtoffer toe te eigenen. Hiervoor moet de kwaadwillende het slachtoffer misleiden om acties uit te voeren, zoals het volgen van een link of openen van een bestand. ``` Capability Access Management Service (camsvc): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54108 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows BitLocker: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54911 | 7.30 | Verkrijgen van verhoogde rechten | | CVE-2025-54912 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Management Services: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54103 | 7.40 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Win32K - GRFX: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54919 | 7.50 | Uitvoeren van willekeurige code | | CVE-2025-55228 | 7.80 | Uitvoeren van willekeurige code | | CVE-2025-55224 | 7.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Graphics Kernel: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-55223 | 7.00 | Verkrijgen van verhoogde rechten | | CVE-2025-55226 | 6.70 | Uitvoeren van willekeurige code | | CVE-2025-55236 | 7.30 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows NTLM: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54918 | 8.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Ancillary Function Driver for WinSock: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54099 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Kernel: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54110 | 8.80 | Verkrijgen van verhoogde rechten | | CVE-2025-53803 | 5.50 | Toegang tot gevoelige gegevens | | CVE-2025-53804 | 5.50 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Windows Bluetooth Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-53802 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows DWM: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-53801 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Microsoft Brokering File System: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54105 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Connected Devices Platform Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54102 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2025-54114 | 7.00 | Denial-of-Service | |----------------|------|-------------------------------------| Microsoft Graphics Component: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-53800 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2025-53807 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows MultiPoint Services: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54116 | 7.30 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows UI XAML Maps MapControlSettings: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54913 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Defender Firewall Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-53808 | 6.70 | Verkrijgen van verhoogde rechten | | CVE-2025-53810 | 6.70 | Verkrijgen van verhoogde rechten | | CVE-2025-54094 | 6.70 | Verkrijgen van verhoogde rechten | | CVE-2025-54104 | 6.70 | Verkrijgen van verhoogde rechten | | CVE-2025-54109 | 6.70 | Verkrijgen van verhoogde rechten | | CVE-2025-54915 | 6.70 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Imaging Component: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-53799 | 5.50 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Windows Routing and Remote Access Service (RRAS): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-53797 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2025-53798 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2025-54095 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2025-54096 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2025-54097 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2025-54106 | 8.80 | Uitvoeren van willekeurige code | | CVE-2025-55225 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2025-53796 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2025-53806 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2025-54113 | 7.50 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows NTFS: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54916 | 7.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Role: Windows Hyper-V: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54091 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2025-54092 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2025-54098 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2025-54115 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows PowerShell: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-49734 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Microsoft Virtual Hard Drive: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54112 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows MapUrlToZone: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54107 | 4.30 | Omzeilen van beveiligingsmaatregel | | CVE-2025-54917 | 4.30 | Omzeilen van beveiligingsmaatregel | |----------------|------|-------------------------------------| Windows SMB: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-55234 | 8.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows SPNEGO Extended Negotiation: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54895 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Internet Information Services: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-53805 | 7.50 | Denial-of-Service | |----------------|------|-------------------------------------| Windows TCP/IP: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54093 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Local Security Authority Subsystem Service (LSASS): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54894 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2025-53809 | 6.50 | Denial-of-Service | |----------------|------|-------------------------------------| Windows SMBv3 Client: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54101 | 4.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows UI XAML Phone DatePickerFlyout: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-54111 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| ```

Official advisory ↗

Patch and workaround

Operational remediation based on structured source evidence.

Status ? Patch availability is based on structured fixed-version fields and authoritative update references. If no fix is verified, check the vendor advisory before making a change.: Patch available
Affected: Microsoft Office for Android: 16.0.1 < 16.0.19220.20000
Windows 10 Version 1507: 10.0.10240.0 < 10.0.10240.21128
Windows 10 Version 1607: 10.0.14393.0 < 10.0.14393.8422
Windows 10 Version 1809: 10.0.17763.0 < 10.0.17763.7792
Windows 10 Version 21H2: 10.0.19044.0 < 10.0.19044.6332
Windows 10 Version 22H2: 10.0.19045.0 < 10.0.19045.6332
Windows 11 version 22H2: 10.0.22621.0 < 10.0.22621.5909
Windows 11 version 22H3: 10.0.22631.0 < 10.0.22631.5909
Windows 11 Version 23H2: 10.0.22631.0 < 10.0.22631.5909
Windows 11 Version 24H2: 10.0.26100.0 < 10.0.26100.6584
Windows Server 2008 R2 Service Pack 1: 6.1.7601.0 < 6.1.7601.27929
Windows Server 2008 R2 Service Pack 1 (Server Core installation): 6.1.7601.0 < 6.1.7601.27929
Windows Server 2008 Service Pack 2: 6.0.6003.0 < 6.0.6003.23529
Windows Server 2008 Service Pack 2 (Server Core installation): 6.0.6003.0 < 6.0.6003.23529
Windows Server 2012: 6.2.9200.0 < 6.2.9200.25675
Windows Server 2012 (Server Core installation): 6.2.9200.0 < 6.2.9200.25675
Windows Server 2012 R2: 6.3.9600.0 < 6.3.9600.22774
Windows Server 2012 R2 (Server Core installation): 6.3.9600.0 < 6.3.9600.22774
Windows Server 2016: 10.0.14393.0 < 10.0.14393.8422
Windows Server 2016 (Server Core installation): 10.0.14393.0 < 10.0.14393.8422
Windows Server 2019: 10.0.17763.0 < 10.0.17763.7792
Windows Server 2019 (Server Core installation): 10.0.17763.0 < 10.0.17763.7792
Windows Server 2022: 10.0.20348.0 < 10.0.20348.4171
Windows Server 2022, 23H2 Edition (Server Core installation): 10.0.25398.0 < 10.0.25398.1849
Windows Server 2025: 10.0.26100.0 < 10.0.26100.6584
Windows Server 2025 (Server Core installation): 10.0.26100.0 < 10.0.26100.6584
Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
Action: Review the linked authoritative reference and apply the recorded fixed release appropriate to the affected product branch.
Workaround: No verified workaround is recorded. Limit untrusted access and use least privilege until authoritative guidance is available.

Evidence and provenance

Published 9 Sept 2025 · Last source change 20 Feb 2026, 16:00 UTC · CWE-908 · Use of Uninitialized Resource

CVE recordCVE.org · 5.2

CVSS sourceCNA

EPSS source

The date BlackTree first stored a score for this CVE from the daily FIRST EPSS feed.

FIRST · tracked since 2026-08-14

European sourceENISA EUVD · EUVD-2025-27331

Product sourceCNA

Remediation sourceCVE/CNA references

CWE sourceOther authority

NVD statusNVD enriched

Core structured fields are present and their contributing authorities are shown above.

Material change intelligence

What changed after publication

View recent updates ↗

No material field changes have been recorded since change tracking began. Routine source refreshes and cosmetic edits are intentionally excluded.

2025-09-09CVE published

ENISA EUVD · EUVD-2025-27331↗CVE authority or vendor reference↗Official CVE record (CNA and ADP data)↗NVD record↗

Technical terms and abbreviations used in this report

CVE: Common Vulnerabilities and Exposures: the public identifier for one disclosed vulnerability.
CVSS: Common Vulnerability Scoring System: a technical severity framework; it is not patching priority by itself.
EPSS: Exploit Prediction Scoring System: FIRST's estimate of the probability that exploitation activity will be observed in the next 30 days; it is a forecast, not confirmation.
CWE: Common Weakness Enumeration: the standard category describing the underlying software or hardware weakness.
CNA: CVE Numbering Authority: an organisation authorised to assign and publish CVE records.
CISA ADP: Cybersecurity and Infrastructure Security Agency Authorized Data Publisher: structured enrichment added to a CVE record.
NVD: National Vulnerability Database: NIST's enrichment service for CVE records.
CERT / CSIRT: A computer security incident response team that publishes warnings or coordinates incident response.
PoC: Proof of concept: public material that demonstrates or helps reproduce exploitation.
CSAF: Common Security Advisory Framework: a machine-readable format for security advisories.
LoTL: Living off the land: abuse of legitimate tools or system functions during an attack.

Windows Imaging Component Information Disclosure Vulnerability

National CERT insights
?
CERT means Computer Emergency Response Team; CSIRT is the closely related term Computer Security Incident Response Team.

ENISA European Vulnerability Database

EUVD-2025-27331

What, why and how

Exploit reality and attack path

Official authority intelligence

Patch and workaround

Evidence and provenance

What changed after publication

Windows Imaging Component Information Disclosure Vulnerability

National CERT insights ?CERT means Computer Emergency Response Team; CSIRT is the closely related term Computer Security Incident Response Team.

EUVD-2025-27331

What, why and how

Exploit reality and attack path

Official authority intelligence

Patch and workaround

Evidence and provenance

National CERT insights
?
CERT means Computer Emergency Response Team; CSIRT is the closely related term Computer Security Incident Response Team.