Product:
Microsoft Graphics Component
Summary
An out-of-bounds read vulnerability in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally. This can lead to sensitive information being exposed to users who have access to the affected system. The issue requires user interaction to exploit, making it a medium severity risk.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-25180 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system and require user interaction. The attacker can craft a malicious file that, when opened by the user, triggers the out-of-bounds read, allowing the attacker to access sensitive information stored in memory.
Affected Products
- Microsoft Graphics Component: Vulnerable to out-of-bounds read, allowing unauthorized information disclosure.
Mitigation
To mitigate this vulnerability, users should ensure that they apply the latest security updates provided by Microsoft. Additionally, users should avoid opening untrusted files or documents that may exploit this vulnerability.