Summary
Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
What type of information could be disclosed by this vulnerability?
A successful exploitation can occur within browser or other applications processing metafiles, resulting in an information disclosure where memory values from the current process are leaked to an attacker.
Security updates
10.0.17763.8511 — https://support.microsoft.com/help/5078752
10.0.20348.4893 — https://support.microsoft.com/help/5078766
10.0.20348.4830 — https://support.microsoft.com/help/5078737
10.0.19044.7058 — https://support.microsoft.com/help/5078885
10.0.26100.32522 — https://support.microsoft.com/help/5078740
10.0.26100.32463 — https://support.microsoft.com/help/5078736
10.0.26200.8037 — https://support.microsoft.com/help/5079473
10.0.26200.7979 — https://support.microsoft.com/help/5079420
10.0.22631.6783 — https://support.microsoft.com/help/5078883
10.0.25398.2207 — https://support.microsoft.com/help/5078734
10.0.14393.8957 — https://support.microsoft.com/help/5078938
6.2.9200.25973 — https://support.microsoft.com/help/5078775
6.3.9600.23074 — https://support.microsoft.com/help/5078774
10.0.28000.1719 — https://support.microsoft.com/help/5079466
Vulnerabilities 1
-
High 7.5
GDI+ Information Disclosure Vulnerability
Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network.
Revision history
-
#1
Information published.
References
-
CVE-2026-25181 GDI+ Information Disclosure Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25181
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss