EUVD-2025-17782Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
6DescriptionCVE.org
Out-of-bounds read in Windows Media allows an authorized attacker to elevate privileges locally.
AnalysisAI
CVE-2025-32716 is an out-of-bounds read vulnerability in Windows Media that allows an authenticated local attacker to achieve privilege escalation on affected systems. The vulnerability has a CVSS score of 7.8 (high severity) due to its impact on confidentiality, integrity, and availability. Without confirmation of KEV status, active exploitation, or public POC availability from the provided data, the real-world risk assessment requires evaluation against the moderate attack complexity (local access required, authenticated user needed).
Technical ContextAI
This vulnerability exists in Windows Media components and is classified as CWE-125 (Out-of-bounds Read), a memory safety issue where the vulnerable code reads data beyond the allocated buffer boundaries. This class of vulnerability typically occurs in native code (C/C++) processing media files or streams without proper bounds checking. The Windows Media subsystem handles various audio/video formats and codecs, making buffer management critical. An out-of-bounds read can leak sensitive memory contents, potentially exposing kernel pointers, authentication tokens, or other privileged data that can be weaponized for privilege escalation. The vulnerability requires local access (AV:L) and prior user authentication (PR:L), indicating the attacker must already have a foothold on the system.
RemediationAI
Patch immediately upon availability from Microsoft (typically released via Windows Update or Manual Downloads). For immediate mitigation before patches are available: (1) Restrict user-level access to systems with elevated privileges where possible; (2) Disable Windows Media features if not required in your environment; (3) Monitor for suspicious local privilege escalation attempts in security logs; (4) Apply principle of least privilege to limit authenticated user capabilities; (5) Isolate systems processing untrusted media files. Check Microsoft Security Update Guide and Windows Release Notes for specific KB articles and patch versions once published.
Windows MSHTML component contains a remote code execution vulnerability that allows attackers to craft malicious ActiveX
Windows Win32k contains an out-of-bounds write vulnerability enabling local privilege escalation to SYSTEM, exploited by
The Windows VBScript engine contains a remote code execution vulnerability in object handling that allows full system co
Windows Win32k fails to properly handle objects in memory, allowing local privilege escalation exploited in the wild in
A privilege escalation vulnerability (CVSS 5.5). Risk factors: actively exploited (KEV-listed), EPSS 94% exploitation pr
Windows Kernel contains a TOCTOU race condition vulnerability allowing local privilege escalation, exploited by the OilR
Windows Internet Shortcut Files (.url) contain an external control vulnerability (CVE-2025-33053, CVSS 8.8) that enables
Windows SMB contains an improper access control vulnerability (CVE-2025-33073, CVSS 8.8) enabling authenticated attacker
Twonky Server 8.5.2 on Linux and Windows allows unauthenticated access to the admin log file through a web service API b
An unrestricted file upload vulnerability exists in MiniWeb HTTP Server <= Build 300 that allows unauthenticated remote
FreeFloat FTP Server contains multiple critical design flaws that allow unauthenticated remote attackers to upload arbit
Serviio Media Server versions 1.4 through 1.8 on Windows contain an unauthenticated command injection in the /rest/actio
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today