You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
cve-2025-47980
About this tag
CVE-2025-47980 is an information disclosure vulnerability in the Windows Imaging Component (WIC), the core framework for image decoding and editing in Windows. This flaw affects applications that rely on WIC, including the Windows Photos app and document scanning tools. The vulnerability allows attackers to potentially access sensitive information from system memory. Microsoft has released patches to address this issue, and applying the July 2025 security updates is the primary mitigation. IT professionals and end-users should prioritize patching to reduce exposure. Discussions on WindowsForum cover the vulnerability's mechanics, severity, and guidance for remediation.
Below is a detailed, publish-ready technical brief on the Windows Imaging Component information-disclosure issue you asked about. I’ve also checked the public advisories and noticed a likely mismatch in the CVE number you supplied — see the “Note on the CVE number” section first.
Note on the CVE...
Windows Imaging Component (WIC), the core framework powering image decoding and editing across numerous Microsoft and third-party applications, faces growing scrutiny after the recent disclosure of CVE-2025-47980 — an information disclosure vulnerability with far-reaching security implications...