PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-53799 Microsoft CVE debrief

CVE-2025-53799 is a medium-severity local information-disclosure issue in Windows Imaging Component. Microsoft’s advisory and the NVD record indicate that an unauthorized attacker could disclose information on affected systems, with user interaction required.

Vendor
Microsoft
Product
Microsoft Office for Android
CVSS
MEDIUM 5.5
CISA KEV
Not listed in stored evidence
Original CVE published
2025-09-09
Original CVE updated
2025-10-02
Advisory published
2025-09-09
Advisory updated
2025-10-02

Who should care

Windows administrators, endpoint security teams, and support teams managing affected Microsoft Windows client and server releases should review this vulnerability. It is especially relevant for environments where users routinely open untrusted content or where local-access risk is higher.

Technical summary

The published description identifies a use of uninitialized resource in Windows Imaging Component that can lead to information disclosure. The NVD CVSS vector is AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, indicating a locally reachable issue that requires user interaction and impacts confidentiality only. NVD lists affected Windows client and server releases, and the Microsoft advisory is the primary vendor reference.

Defensive priority

Medium. This is not a KEV-listed issue in the supplied data, but the confidentiality impact and broad Windows coverage justify timely patching on affected systems.

Recommended defensive actions

  • Review Microsoft’s advisory for CVE-2025-53799 and apply the relevant updates to affected Windows and server systems.
  • Prioritize patching devices that process untrusted files or where users commonly interact with externally supplied content.
  • Confirm exposure across the Windows versions listed in NVD before and after remediation, including client and server estates.
  • Use standard endpoint hardening and least-privilege controls to reduce the likelihood and impact of local disclosure paths.
  • Track remediation status because this issue affects multiple supported Windows generations and is not limited to a single product line.

Evidence notes

The vulnerability description supplied with the CVE states: "Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally." The NVD record provides the CVSS vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N and lists affected Microsoft Windows client/server CPEs; it also includes a Microsoft vendor advisory reference. No exploitability details beyond the supplied official records are used here.

Official resources

Publicly disclosed on 2025-09-09, per the supplied CVE and source timeline fields.