CVE-2025-47984
published 2025-07-08CVE-2025-47984: Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network.
PriorityP353high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
14.29%
96.2th percentile
Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network.
Affected
47 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | windows_10_1507 | < 10.0.10240.21073 | 10.0.10240.21073 |
| microsoft | windows_10_1607 | < 10.0.14393.8246 | 10.0.14393.8246 |
| microsoft | windows_10_1809 | < 10.0.17763.7558 | 10.0.17763.7558 |
| microsoft | windows_10_21h2 | < 10.0.19044.6093 | 10.0.19044.6093 |
| microsoft | windows_10_22h2 | < 10.0.19045.6093 | 10.0.19045.6093 |
| microsoft | windows_10_version_1507 | >= 10.0.10240.0 < 10.0.10240.21073 | 10.0.10240.21073 |
| microsoft | windows_10_version_1607 | >= 10.0.14393.0 < 10.0.14393.8246 | 10.0.14393.8246 |
| microsoft | windows_10_version_1809 | >= 10.0.17763.0 < 10.0.17763.7558 | 10.0.17763.7558 |
| microsoft | windows_10_version_21h2 | >= 10.0.19044.0 < 10.0.19044.6093 | 10.0.19044.6093 |
| microsoft | windows_10_version_22h2 | >= 10.0.19045.0 < 10.0.19045.6093 | 10.0.19045.6093 |
| microsoft | windows_11_22h2 | < 10.0.22621.5624 | 10.0.22621.5624 |
| microsoft | windows_11_23h2 | < 10.0.22631.5624 | 10.0.22631.5624 |
| microsoft | windows_11_24h2 | < 10.0.26100.4652 | 10.0.26100.4652 |
| microsoft | windows_11_version_22h2 | >= 10.0.22621.0 < 10.0.22621.5624 | 10.0.22621.5624 |
| microsoft | windows_11_version_22h3 | >= 10.0.22631.0 < 10.0.22631.5624 | 10.0.22631.5624 |
| microsoft | windows_11_version_23h2 | >= 10.0.22631.0 < 10.0.22631.5624 | 10.0.22631.5624 |
| microsoft | windows_11_version_24h2 | >= 10.0.26100.0 < 10.0.26100.4652 | 10.0.26100.4652 |
| microsoft | windows_server_2008 | — | — |
| microsoft | windows_server_2008_r2_service_pack_1 | >= 6.1.7601.0 < 6.1.7601.27820 | 6.1.7601.27820 |
| microsoft | windows_server_2008_service_pack_2 | >= 6.0.6003.0 < 6.0.6003.23418 | 6.0.6003.23418 |
| microsoft | windows_server_2012 | — | — |
| microsoft | windows_server_2012 | >= 6.2.9200.0 < 6.2.9200.25573 | 6.2.9200.25573 |
| microsoft | windows_server_2012_r2 | >= 6.3.9600.0 < 6.3.9600.22676 | 6.3.9600.22676 |
| microsoft | windows_server_2016 | < 10.0.14393.8246 | 10.0.14393.8246 |
| microsoft | windows_server_2016 | >= 10.0.14393.0 < 10.0.14393.8246 | 10.0.14393.8246 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
vendor_msrc7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-xwpq-cccj-w9hf: Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network
ghsa_unreviewed·2025-07-08
CVE-2025-47984 [HIGH] CWE-693 GHSA-xwpq-cccj-w9hf: Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network
Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network.
Microsoft
Windows GDI Information Disclosure Vulnerability
vendor_msrc·2025-07-08·CVSS 7.5
CVE-2025-47984 [HIGH] CWE-693 Windows GDI Information Disclosure Vulnerability
Windows GDI Information Disclosure Vulnerability
Description: Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network.
FAQ: What type of information could be disclosed by this vulnerability?
The type of information that could be disclosed if an attacker successfully exploited this vulnerability is sensitive information.
Windows GDI: Windows GDI
Microsoft: Microsoft
Customer Action Required: Yes
Impact: Information Disclosure
Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5062557
Reference: https://support.microsoft.com/help/5062557
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?
No detection rules found.
No public exploits indexed.
Checkpoint
3rd November – Threat Intelligence Report
blogs_checkpoint·2025-11-03·CVSS 9.8
CVE-2025-61882 [CRITICAL] 3rd November – Threat Intelligence Report
Latest Publications
CPR Podcast Channel
AI Research
Web 3.0 Security
Intelligence Reports
ThreatCloud AI
Threat Intelligence & Research
Zero Day Protection
Sandblast File Analysis
About Us
SUBSCRIBE
2026
2025
2024
2023
2022
2021
2020
2019
2018
2017
2016
## 3rd November – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 3rd November, please download our Threat Intelligence Bulletin .
TOP ATTACKS AND BREACHES
The Everest ransomware group has claimed responsibility for a series of attacks impacting AT&T, Dublin Airport, and Air Arabia. The ransomware gang exfiltrated sensitive data including 576,000 AT&T applicant records, 1.5 million Dublin Airport passenger files, and 18,000 Air Arabia employee records. Sweden’s power grid op
Checkpoint
Drawn to Danger: Windows Graphics Vulnerabilities Lead to Remote Code Execution and Memory Exposure
blogs_checkpoint·2025-11-02·CVSS 7.8
CVE-2025-30388 [HIGH] Drawn to Danger: Windows Graphics Vulnerabilities Lead to Remote Code Execution and Memory Exposure
Latest Publications
CPR Podcast Channel
AI Research
Web 3.0 Security
Intelligence Reports
ThreatCloud AI
Threat Intelligence & Research
Zero Day Protection
Sandblast File Analysis
About Us
SUBSCRIBE
AI Research 2
Android Malware 23
Artificial Intelligence 4
ChatGPT 3
Check Point Research Publications 455
Cloud Security 1
CPRadio 44
Crypto 2
Data & Threat Intelligence 2
Data Analysis 0
Demos 22
Global Cyber Attack Reports 408
How To Guides 13
Ransomware 5
Russo-Ukrainian War 1
Security Report 1
Threat and data analysis 0
Threat Research 174
Web 3.0 Security 11
Wipers 0
## Drawn to Danger: Windows Graphics Vulnerabilities Lead to Remote Code Execution and Memory Exposure
## Background
GDI
These are the vulnerabilities:
CVE-2025-30388 , rated important an
Checkpoint
18th August – Threat Intelligence Report
blogs_checkpoint·2025-08-18
CVE-2025-30388 18th August – Threat Intelligence Report
Latest Publications
CPR Podcast Channel
AI Research
Web 3.0 Security
Intelligence Reports
ThreatCloud AI
Threat Intelligence & Research
Zero Day Protection
Sandblast File Analysis
About Us
SUBSCRIBE
2026
2025
2024
2023
2022
2021
2020
2019
2018
2017
2016
## 18th August – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 18th August, please download our Threat Intelligence Bulletin .
TOP ATTACKS AND BREACHES
The Canadian House of Commons has suffered a data breach. The incident resulted in unauthorized access to a database containing employees’ names, office locations, email addresses, and information on House-managed computers and mobile devices, reportedly due to vulnerability in Microsoft software.
The Office of the Pennsyl
2025-07-08
Published