PT-2026-24307 · Microsoft · Windows

Gábor Selján + 1 · Published 2026-03-10 · Updated 2026-03-17 · CVE-2026-25180

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows versions (affected versions not specified)

Description An issue exists in the Windows Graphics Component that involves an out-of-bounds read in memory. Successful exploitation may allow an attacker to gain unauthorized access to protected information. The issue allows attackers to obtain sensitive information and affect the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2026-02898

CVE-2026-25180

Affected Products

Windows

References · 10

• https://osv.dev/vulnerability/CVE-2026-25180 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25180 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-25180 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25180 · Security Note
• https://msrc.microsoft.com/update-guide/advisory/CVE-2026-25180 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02898 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25180 · Vendor Advisory
• https://twitter.com/rahsi_aaka/status/2033888909420343609 · Twitter Post
• https://twitter.com/CVEnew/status/2033361147768811849 · Twitter Post
• https://t.me/cveNotify/155447 · Telegram Post