CVE-2026-25181Disclosure(microsoft / windows_10_1607)

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network.

microsoft CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25181

Weakness type (CWE)

CWE-125

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2

Threat summary

4 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 4 classified signals
Peaked at 2 mentions on most recent observed day (2026-03-16)
4 total mentions across 3 days

Affected systems

Vendors

microsoft

Products

windows_10_1607windows_10_1809windows_10_21h2windows_10_22h2windows_11_23h2windows_11_24h2windows_11_25h2windows_11_26h1windows_server_2012windows_server_2016

2 versions affected across 14 products

Deep dive

Activity timeline4 mentions / 3d

Signal classification1 categories

Disclosure

4100.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-13	1	Disclosure1
2026-03-14	1	Disclosure1
2026-03-16	2	Disclosure2

Full discourse4 posts

SystemTek - Technology news website@SystemTek_UK208d
Disclosure
Microsoft Windows GDI Bitmap Parsing Out-Of-Bound Read Information Disclosure Vulnerability (CVE-2026-25181) #CVE202625181 #CyberSecurity #Microsoft #MicrosoftWindows #OutOfBoundReadInformationDisclosureVulnerability https://www.systemtek.co.uk/?p=48734 https://t.co/3xj8r7ogzB
Post summary
The tweet announces the discovery of a CVE-2026-25181 vulnerability in Windows GDI Bitmap parsing that results in an out-of-bound read and information disclosure, without providing any PoC, exploit, patch, or evidence of active exploitation.
0001062
1.8K followersView on X
Infoflowcloud@infoflowcloud207d
Disclosure
🚨*CVE* CVE-2026-25181 Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network. https://www.cve.org/CVERecord?id=CVE-2026-25181 ----- Traducción: CVE-2026-25181 lectura fuera de límites en Windows GDI+ permite a un atacante no… http://infoflow.cloud`
Post summary
The post announces CVE-2026-25181, an out-of-bounds read vulnerability in Windows GDI+ that can enable network-based information disclosure, with no indications of PoC, exploits, or patches.
0000036
58 followersView on X
CVE@CVEnew207d
Disclosure
CVE-2026-25181 Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network. https://www.cve.org/CVERecord?id=CVE-2026-25181
Post summary
CVE-2026-25181 describes an out‑of‑bounds read vulnerability in Windows GDI+ that allows attackers to disclose data over the network, with no PoC, exploit, or patch referenced.
00000259
56.7K followersView on X
Anonymous Tech@Anonymous_Tech7209d
Disclosure
Microsoft Windows systems are vulnerable to a GDI bitmap parsing out-of-bound read, assigned CVE-2026-25181, allowing remote attackers to disclose sensitive information, with a CVSS rating of 3.3.
Post summary
A new CVE-2026-25181 vulnerability in Microsoft Windows GDI bitmap parsing allows remote out-of-bound read and potential disclosure of sensitive data, rated CVSS 3.3. No PoC, exploit, or patch is mentioned.
0000034
1 followersView on X

CPE platform detail25 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

25 of 25 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	microsoft	windows_10_1607	-	-	x64
OS	microsoft	windows_10_1607	-	-	x86
OS	microsoft	windows_10_1809	-	-	x64
OS	microsoft	windows_10_1809	-	-	x86
OS	microsoft	windows_10_21h2	-	-	arm64
OS	microsoft	windows_10_21h2	-	-	x64
OS	microsoft	windows_10_21h2	-	-	x86
OS	microsoft	windows_10_22h2	-	-	arm64
OS	microsoft	windows_10_22h2	-	-	x64
OS	microsoft	windows_10_22h2	-	-	x86
OS	microsoft	windows_11_23h2	-	-	arm64
OS	microsoft	windows_11_23h2	-	-	x64
OS	microsoft	windows_11_24h2	-	-	arm64
OS	microsoft	windows_11_24h2	-	-	x64
OS	microsoft	windows_11_25h2	-	-	arm64
OS	microsoft	windows_11_25h2	-	-	x64
OS	microsoft	windows_11_26h1	-	-	arm64
OS	microsoft	windows_11_26h1	-	-	x64
OS	microsoft	windows_server_2012	-	-	-
OS	microsoft	windows_server_2012	r2	-	-
OS	microsoft	windows_server_2016	-	-	-
OS	microsoft	windows_server_2019	-	-	-
OS	microsoft	windows_server_2022	-	-	-
OS	microsoft	windows_server_2022_23h2	-	-	-
OS	microsoft	windows_server_2025	-	-	x64

Explore more

Back to dashboard microsoft CVEs windows_10_1607 vulnerabilities

What researchers are saying

CVE-2026-25181

SystemTek - Technology news website@SystemTek_UKDisclosure

The tweet announces the discovery of a CVE-2026-25181 vulnerability in Windows GDI Bitmap parsing that results in an out-of-bound read and information disclosure, without providing any PoC, exploit, patch, or evidence of active exploitation.

Infoflowcloud@infoflowcloudDisclosure

The post announces CVE-2026-25181, an out-of-bounds read vulnerability in Windows GDI+ that can enable network-based information disclosure, with no indications of PoC, exploits, or patches.

CVE@CVEnewDisclosure

CVE-2026-25181 describes an out‑of‑bounds read vulnerability in Windows GDI+ that allows attackers to disclose data over the network, with no PoC, exploit, or patch referenced.

Anonymous Tech@Anonymous_Tech7Disclosure

A new CVE-2026-25181 vulnerability in Microsoft Windows GDI bitmap parsing allows remote out-of-bound read and potential disclosure of sensitive data, rated CVSS 3.3. No PoC, exploit, or patch is mentioned.