You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
high severity
About this tag
The high severity tag on WindowsForum.com covers urgent security vulnerabilities that pose significant risks to systems and networks. Discussions focus on critical flaws such as CVE-2025-7775 in Citrix NetScaler, which enables pre-auth remote code execution, and CVE-2025-21382 in the Windows Graphics Component, leading to elevation of privilege. These threads emphasize the need for immediate patching, verification steps, and understanding of affected systems to prevent exploitation. The tag serves as a resource for IT professionals and users seeking timely information on high severity threats, including memory overflow and improper buffer handling issues that can result in complete system compromise.
CISA has added a critical Citrix NetScaler vulnerability — CVE-2025-7775 — to its Known Exploited Vulnerabilities (KEV) Catalog after evidence of active exploitation, prompting an urgent patch-and-verify cycle for NetScaler ADC and NetScaler Gateway operators worldwide.
Background
CVE-2025-7775...
CVE-2025-21382 is an elevation of privilege vulnerability identified in the Windows Graphics Component. This flaw arises from improper handling of memory buffers within the graphics libraries, potentially allowing attackers to execute arbitrary code with elevated privileges. By exploiting this...