You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
cve-2025-50165
About this tag
CVE-2025-50165 is a high-risk remote code execution vulnerability in the Microsoft Graphics Component, caused by an untrusted pointer dereference in Windows' graphics stack. It affects both client and server Windows builds and can be exploited by an unauthenticated attacker over a network. This flaw was addressed in Microsoft's August 2025 Patch Tuesday, which also fixed other critical issues including a Kerberos elevation-of-privilege bug and multiple graphics RCEs. Administrators are urged to prioritize patching CVE-2025-50165 and apply the August cumulative updates to reduce exposure to active threats.
Microsoft’s August security roll-up arrived with muscle: a broad set of fixes across Windows, Office, Hyper‑V, RRAS, and Edge that closes dozens of high‑risk holes — but the tally of affected CVEs, the presence of a publicly disclosed Kerberos issue, and multiple graphics‑parsing remote code...
Microsoft’s August Patch Tuesday closed a dangerous mix of high‑impact remote code execution (RCE) flaws and a publicly disclosed Kerberos elevation‑of‑privilege (EoP) vulnerability that together raise the operational urgency for domain controllers, document‑processing servers, and any service...
Microsoft pushed its August Patch Tuesday cumulative updates on August 12–13, 2025, delivering the monthly security rollups that fix a broad range of vulnerabilities across Windows client and server platforms—most notably a publicly disclosed privilege‑escalation bug in Windows Kerberos...
cve-2025-50165
cve-2025-53766
cve-2025-53779
exchange server
gdiplus
graphics component
kerberos
patch
patch management
privilege escalation
rce
secure boot
servicing stack
sql server
ssu-lcu
windows 11
windows security
windows server
Microsoft’s August Patch Tuesday landed as a heavy-duty maintenance window for Windows environments, with the vendor listing more than a hundred fixes across its product portfolio — including a clutch of high-profile remote code execution (RCE) and elevation-of-privilege flaws that demand...
A newly disclosed vulnerability in the Microsoft Graphics Component, tracked as CVE-2025-50165, is being treated as a high-risk remote code execution (RCE) issue that can allow an unauthenticated attacker to execute arbitrary code over a network by triggering an untrusted pointer dereference in...