Product:
Microsoft Graphics Component
Summary
Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information over a network. This vulnerability can lead to significant confidentiality breaches. Attackers can exploit this flaw to gain access to sensitive data.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-64670 |
Exploitation
To exploit this vulnerability, an attacker must have authorized access to the network where the Microsoft Graphics Component is deployed. By leveraging this access, the attacker can send specially crafted requests that trigger the information disclosure, allowing them to retrieve sensitive data from the system.
Affected Products
- Microsoft Graphics Component: Vulnerable to information disclosure due to improper handling of sensitive data.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Additionally, organizations should implement strict access controls and monitor network traffic for any unauthorized access attempts.