Drawn to Danger: Windows Graphics Vulnerabilities Lead to Remote Code Execution and Memory Exposure

According to Check Point Research, three Windows Graphics Device Interface (GDI) vulnerabilities were identified and addressed by Microsoft in Patch Tuesday updates during May, July and August 2025. The flaws are tracked as CVE-2025-30388, CVE-2025-53766 and CVE-2025-47984, with the first two rated important and the latter enabling information disclosure as well as remote code execution in some contexts.

The fixes were issued for GdiPlus.dll and related components, including updates in 10.0.26100.3037 and later 10.0.26100.4061 and 10.0.26100.4946, and Microsoft documented a high exploitability risk for these issues, noting that CVE-2025-30388 is linked to an exploitation scenario described as “Exploitation More Likely.” The report also notes that the vulnerabilities affect

Microsoft Office for Mac and Android, and that the remedies were delivered via KB5058411 during May 2025 and KB5063878 in August 2025, with related information disclosures addressed by subsequent patches.