cve 2025 64670

CVE-2025-64670 is a medium-severity information disclosure vulnerability in the Windows DirectX component, specifically within the Microsoft Graphics Component. It allows an authenticated, low-privilege attacker to leak sensitive kernel or process memory over a network-reachable channel. Microsoft has addressed this issue in its Security Update Guide, and the vulnerability is part of a broader set of DirectX and GDI+ graphics fixes that require prioritized but measured remediation. Users should apply the relevant Windows security updates to mitigate the risk.