Heap-based Buffer Overflow in Windows GDI+ Affects Microsoft Products
CVE-2025-53766

9.8CRITICAL

Key Information:

Vendor

Microsoft
Status
Windows 10 Version 1809
Windows Server 2019
Windows Server 2019 (server Core Installation)
Windows Server 2022
Vendor
CVE Published:
12 August 2025

Badges

👾 Exploit Exists📰 News Worthy

What is CVE-2025-53766?

A heap-based buffer overflow in Windows GDI+ can enable an unauthorized attacker to execute arbitrary code via network means. This vulnerability can threaten the integrity and confidentiality of systems running affected versions of Windows GDI+, making it a significant concern for both individual and enterprise users. Prompt patching is essential to mitigate this risk. For further details, refer to the vendor advisory at Microsoft.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Microsoft Office for Android Unknown 16.0.1 < 16.0.19127.20000

Microsoft Office for Universal Unknown 16.0.1 < 16.0.14326.22618

Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.21100

News Articles

favicon imageTechNadu

Windows GDI Vulnerabilities Lead to RCE and Data Leaks - TechNadu

Check Point Research found three critical flaws in Windows GDI, including one for remote code execution. Microsoft has issued patches to fix them.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • 📰

    First article discovered by TechNadu

  • Vulnerability published

  • Vulnerability Reserved

JSON
.