QSearchQSearch

CVE-2025-53799

5.5 MEDIUM

Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally

Published: 2025-09-09 · Last updated: 2025-10-02

Severity and scoring

CVSS
5.5 MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE
CWE-908

Affected products

VendorProduct
microsoftoffice, windows_10_1507, windows_10_1607

Description

Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.

Source: NVD

References

Related CVEs

Same vendor

  • CVE-2026-50512 Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privilege... (7.8 HIGH)
  • CVE-2026-50511 Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privilege... (7.8 HIGH)
  • CVE-2026-50507 Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack (6.8 MEDIUM)
  • CVE-2026-49161 Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally (7.8 HIGH)
  • CVE-2026-49160 Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network (7.5 HIGH)

Same CWE

  • CVE-2026-42969 Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally (5.5 MEDIUM)
  • CVE-2026-48104 7-Zip is a file archiver with a high compression ratio (4.2 MEDIUM)
  • CVE-2026-48101 7-Zip is a file archiver with a high compression ratio (6.5 MEDIUM)
  • CVE-2026-11089 Uninitialized Use in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to ... (6.5 MEDIUM)
  • CVE-2026-26825 A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files (5.3 MEDIUM)