CVE-2026-25181 GDI+ Information Disclosure Vulnerability

Api.Msrc.Microsoft • March 10, 2026

Share: View original

Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities in Windows GDI+ Disclosed Two vulnerabilities in Windows GDI+ have been reported, affecting the ability of unauthorized attackers to disclose information and execute code. CVE-2026-25181 allows for information disclosure through an out-of-bounds read, while another CVE indicates an untrusted path that could enable local code execution. Both vulnerabilities were published on 2026-03-10. 2 sources 58

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)