Skip to content
OpenAdvisories
Critical MSRC-CVE-2025-53799 1 CVE

Windows Imaging Component Information Disclosure Vulnerability

Published Sep 9, 2025 · Updated Sep 9, 2025

Summary

Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

Details

What type of information could be disclosed by this vulnerability?
An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
An attacker must send a user a malicious Office file and convince them to open it.

Is the Preview Pane an attack vector for this vulnerability?
No, the Preview Pane is not an attack vector.

Security updates
10.0.17763.7792 — https://support.microsoft.com/help/5065428
10.0.20348.4171 — https://support.microsoft.com/help/5065432
10.0.20348.4106 — https://support.microsoft.com/help/5065306
10.0.19044.6332 — https://support.microsoft.com/help/5065429
10.0.22621.5909 — https://support.microsoft.com/help/5065431
10.0.26100.6584 — https://support.microsoft.com/help/5065426
10.0.26100.6508 — https://support.microsoft.com/help/5065474
10.0.25398.1849 — https://support.microsoft.com/help/5065425
10.0.10240.21128 — https://support.microsoft.com/help/5065430
10.0.14393.8422 — https://support.microsoft.com/help/5065427
6.0.6003.23529 — https://support.microsoft.com/help/5065508
6.0.6003.23529 — https://support.microsoft.com/help/5065511
6.1.7601.27929 — https://support.microsoft.com/help/5065468
6.1.7601.27929 — https://support.microsoft.com/help/5065510
6.2.9200.25675 — https://support.microsoft.com/help/5065509
6.3.9600.22774 — https://support.microsoft.com/help/5065507
16.0.19220.20000 — https://support.google.com/googleplay/answer/113412?hl=en

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References