gdi+

Microsoft’s advisory for CVE-2025-59216 describes a race-condition vulnerability in the Windows Graphics Component that can allow an authenticated local attacker to elevate privileges if they can win a timing window. Executive summary What it is: CVE-2025-59216 is a “concurrent execution using...

August’s security headlines were dominated by a clutch of high-impact flaws — from archive utilities and consumer networking gear to enterprise-grade management consoles and cloud AI services — that together made rapid triage and patching unavoidable for defenders. Background The August 2025...

India’s national cybersecurity agency has escalated an urgent warning about a wave of high‑severity Microsoft vulnerabilities that together pose significant risk to consumers, enterprises, and cloud customers — the advisory links Microsoft’s August security updates (including a publicly...

Microsoft’s August Patch Tuesday closed a dangerous mix of high‑impact remote code execution (RCE) flaws and a publicly disclosed Kerberos elevation‑of‑privilege (EoP) vulnerability that together raise the operational urgency for domain controllers, document‑processing servers, and any service...

Microsoft’s August Patch Tuesday delivered a heavy-duty security package this month — industry tallies vary between 107 and 111 vulnerabilities, including a publicly disclosed Kerberos elevation-of-privilege issue (CVE‑2025‑53779) and roughly a dozen other critical remote‑code‑execution (RCE)...

Microsoft’s own Security Update Guide lists a new vulnerability tracked as CVE-2025-53766, described as a heap-based buffer overflow in GDI+ that could allow remote code execution over a network, but independent public records and third‑party databases were not uniformly available at the time of...

A newly disclosed vulnerability in the Microsoft Graphics Component, tracked as CVE-2025-50165, is being treated as a high-risk remote code execution (RCE) issue that can allow an unauthenticated attacker to execute arbitrary code over a network by triggering an untrusted pointer dereference in...

It’s yet another day in the bustling world of cybersecurity, and Microsoft’s Security Response Center has just published an advisory about a fresh vulnerability—this time, labeled CVE-2025-21338. This new "villain" is a Remote Code Execution (RCE) vulnerability tied to GDI+, Microsoft’s...

Severity Rating: Critical Revision Note: V1.3 (December 16, 2013): Revised bulletin to announce a detection change to correct an offering issue for Windows RT (2835361) and for Windows RT (2835364). This is a detection change only. There were no changes to the update files. Customers who have...

Today, we’re providing advance notification for the release of eight bulletins, three Critical and five Important, for November 2013. The Critical updates address vulnerabilities in Internet Explorer and Microsoft Windows, and the Important updates address issues in Windows and Office. While...

Severity Rating: Critical Revision Note: V1.2 (August 13, 2013): Bulletin revised to announce a detection change for the 2687276 update for Microsoft Office 2010. This detection change only affects non-English deployments. There were no changes to the security update files. Customers who have...

Severity Rating: Critical Revision Note: V.1.1 (August 1, 2013): Bulletin revised to announce a detection change in the 2687276 update for Microsoft Office 2010. There were no changes to the security update files. Customers who have already successfully updated their systems do not need to take...

Today we’re providing advance notification for the release of seven bulletins, six Critical and one Important, for July 2013. The Critical bulletins address vulnerabilities in Microsoft Windows, .NET Framework, Silverlight, Internet Explorer and GDI+. Also scheduled for inclusion among...

Severity Rating: Critical - Revision Note: V1.0 (April 12, 2011): Bulletin published.Summary: This security update resolves a privately reported vulnerability in Microsoft Windows GDI+. The vulnerability could allow remote code execution if a user viewed a specially crafted image file using...

Bulletin Severity Rating:Critical - This security update resolves a privately reported vulnerability in Microsoft Windows GDI+. The vulnerability could allow remote code execution if a user viewed a specially crafted image file using affected software or browsed a Web site that contains...