Skip to content

CVE

CVE-2025-49708

9.9
CVSS 3.1
1
story
Severity
9.9 Critical · vendor score
Published
Oct 14, 2025
Weakness
CWE-416

What it is

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.

From the National Vulnerability Database

Decipher coverage · 1 story

Newest first ↑
  1. VulnerabilitiesMicrosoft Fixes Actively Exploited Flaws in Patch Tuesday ReleaseMicrosoft issued fixes for several actively exploited vulnerabilities in its latest patch Tuesday release.LINDSEY O'DONNELL-WELCH · 2 MIN

Official references

3 sources

Registries

RegistryNVDScore, weakness and every referenceRegistryCVE.orgThe official CVE record

Advisories, fixes & analysis

Vendor advisorymsrc.microsoft.com/update-guide/vulnerability/CVE-2025-49708