CVE-2025-50165: Critical RCE Vulnerability in Windows Graphics
Cyber Security News by CyberSum.net
Zscaler ThreatLabz discovered CVE-2025-50165, a critical remote code execution (RCE) vulnerability with a CVSS score of 9.8 affecting the Windows Graphics Component. The vulnerability, found in windowscodecs.dll, can be exploited through malicious JPEG images embedded in files like Microsoft Office documents. Users are advised to update their systems to the patched versions to mitigate the risk.