Drawn to Danger: Windows Graphics Vulnerabilities Lead to Remote Code Execution and Memory Exposure
ID: e148a7ee-00a9-5bb1-b850-8f35ce807a43
STIX ID: report--e148a7ee-00a9-5bb1-b850-8f35ce807a43
Feed Name: Check Point Research
Threat Score
Check Point Research discovered several vulnerabilities in Windows GDI's EMF+ parsing that allow out-of-bounds memory reads and writes—leading to remote code execution (CVE-2025-30388, CVE-2025-53766) and information disclosure (CVE-2025-47984); the report includes crash analysis, PoCs and patch diff analysis, and notes Microsoft fixed the issues in Patch Tuesday updates between May and August 2025.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.