Heap-Based Buffer Overflow in Microsoft Graphics Component
CVE-2025-49744
7HIGH
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 8 July 2025
What is CVE-2025-49744?
A heap-based buffer overflow vulnerability exists in Microsoft Graphics Component. An authorized attacker with local access can exploit this flaw to elevate their privileges on affected systems, allowing them to execute malicious commands or access sensitive data. This vulnerability poses significant risks, particularly in environments where local access controls are less stringent.
Affected Version(s)
Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.21073
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.8246
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.7558