Microsoft's Security Response Center lists CVE-2025-50161 as a heap-based buffer overflow in the Win32K GRFX subsystem that allows an authorized local attacker to elevate privileges, and administrators should treat this as a high-priority patching item for all affected Windows hosts.
Background...
Bulletin Severity Rating:Important - This security update resolves a privately reported vulnerability in the Local Security Authority Subsystem Service (LSASS) in Windows XP and Windows Server 2003. This security update is rated Important for all supported editions of these operating systems...