Cloud Vulnerability DB
A community-led vulnerabilities database
Wiz Agents & Workflows are here
Vulnerability DatabaseCVE-2025-59216
CVE-2025-59216:
vulnerability analysis and mitigation
Overview
Microsoft disclosed a critical elevation of privilege vulnerability (CVE-2025-59216) in the Microsoft Graphics Component as part of their September 2025 Security Update. The vulnerability affects multiple Windows versions including Windows 10 (versions 21H2 and 22H2), Windows 11 (versions 22H2, 23H2, and 24H2), and Windows Server 2022 and 2025 editions (ASEC Report, CERT-FR).
Technical details
The vulnerability was classified as a Critical elevation of privilege vulnerability specifically affecting the Microsoft Graphics Component. The security update was released on September 18, 2025, as part of Microsoft's regular patch cycle (ASEC Report).
Impact
If successfully exploited, this vulnerability allows attackers to perform privilege escalation on affected systems (CERT-FR).
Mitigation and workarounds
Microsoft has released security patches for all affected systems. Users are advised to update their systems to the latest versions through Windows Update. For Windows 10 Version 21H2, systems should be updated to version 10.0.19043.6332 or later. For Windows 11 Version 22H2 and 23H2, systems should be updated to version 10.0.22631.5909 or later. Windows Server 2022 users should update to version 10.0.20348.4106 or later (CERT-FR).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management