CVE-2025-60724

CVE-2025-60724 is a critical heap-based buffer overflow vulnerability in Microsoft Graphics Component, allowing an unauthenticated attacker to execute arbitrary code remotely over a network. With a CVSS score of 9.8, this flaw presents a severe risk due to its low attack complexity and complete compromise of confidentiality, integrity, and availability. While there is no public exploit code or evidence of active exploitation (KEV inactive), the vulnerability has garnered significant community discussion and media coverage, indicating high awareness and potential for future exploitation.