MSRC-CVE-2025-59195 — Windows Graphics Component Denial of Service Vulnerability

Summary

Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to win a race condition.

Security updates
10.0.26200.6899 — https://support.microsoft.com/help/5066835
10.0.17763.7919 — https://support.microsoft.com/help/5066586
10.0.20348.4294 — https://support.microsoft.com/help/5066782
10.0.19044.6456 — https://support.microsoft.com/help/5066791
10.0.22621.6060 — https://support.microsoft.com/help/5066793
10.0.25398.1913 — https://support.microsoft.com/help/5066780

Vulnerabilities 1

High 7.0

CVE-2025-59195

Windows Graphics Component Denial of Service Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to deny service locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Oct 14, 2025

Revision history

2025-10-14 #1
Information published.

References

CVE-2025-59195 Windows Graphics Component Denial of Service Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59195
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss