Microsoft has recorded CVE‑2026‑25180 as an information disclosure defect in the Windows Graphics Component — an out‑of‑bounds read that can permit an unprivileged, local actor to leak sensitive memory from affected systems — and administrators should treat the advisory as actionable: verify...