CVE-2025-64670

Description

Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information over a network.

CVSS Details

CVSS Score

6.5

Severity

MEDIUM

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Configurations (Affected Products)

cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:* - VULNERABLE

cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:* - VULNERABLE

cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:* - VULNERABLE

cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:* - VULNERABLE

cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:* - VULNERABLE

Windows 10 多个版本

Windows 11 多个版本

Windows Server 2019 及更高版本

Microsoft Graphics Component 受影响版本

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

# CVE-2025-64670 PoC概念验证（仅供安全研究）
# 注意：此代码仅用于理解漏洞原理，请勿用于非法用途

import requests
import json

def check_cve_2025_64670(target_url):
    """
    检测目标是否受CVE-2025-64670影响
    该漏洞为信息泄露漏洞，PoC需要发送特制请求触发信息泄露
    """
    headers = {
        'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36',
        'Content-Type': 'application/x-www-form-urlencoded'
    }
    
    # 构造可能触发漏洞的请求
    # 具体payload需要根据实际漏洞详情确定
    exploit_payload = {
        'action': 'render',
        'data': 'malformed_graphics_request'
    }
    
    try:
        response = requests.post(target_url, data=exploit_payload, headers=headers, timeout=10)
        
        # 检查响应中是否包含敏感信息
        sensitive_patterns = ['password', 'token', 'secret', 'key', 'credential']
        for pattern in sensitive_patterns:
            if pattern.lower() in response.text.lower():
                return {
                    'vulnerable': True,
                    'leaked_data': 'Sensitive information detected',
                    'description': '目标系统可能存在信息泄露漏洞'
                }
        
        return {
            'vulnerable': False,
            'description': '未检测到明显的漏洞迹象'
        }
        
    except requests.RequestException as e:
        return {
            'error': str(e),
            'description': '请求失败，请检查目标URL是否可达'
        }

if __name__ == '__main__':
    print('CVE-2025-64670 检测工具')
    print('=' * 50)
    target = input('请输入目标URL: ')
    result = check_cve_2025_64670(target)
    print(json.dumps(result, indent=2, ensure_ascii=False))

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2025-64670
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2025-64670
[3] CVE Details https://www.cvedetails.com/cve/CVE-2025-64670/
[4] VulDB https://vuldb.com/cve/CVE-2025-64670
[5] https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-64670

Raw JSON Data

JSON

{"cve": {"id": "CVE-2025-64670", "sourceIdentifier": "[email protected]", "published": "2025-12-09T18:16:06.233", "lastModified": "2025-12-10T19:10:34.523", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information over a network."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 2.8, "impactScore": 3.6}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-200"}]}, {"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.0.19044.6691", "matchCriteriaId": "9D04167A-522C-433E-8CEB-C1D8A02C23D8"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.0.19045.6691", "matchCriteriaId": "A86D6CDC-55E5-4817-A6CE-4CE41921FB79"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.0.22631.6345", "matchCriteriaId": "6DCE32D0-A9E0-4029-AB35-5E202A42AF01"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.0.26100.7392", "matchCriteriaId": "8DCD2A6E-7CD0-4FCC-AC11-5A1470776C24"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.0.26200.7392", "matchCriteriaId": "8EA08CDD-D682-403D-8B50-879EB4D88C67"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.0.20348.4467", "matchCriteriaId": "C552FBB4-8F98-492E-A084-AF14C9514A67"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.0.25398.2025", "matchCriteriaId": "E9CE4A36-DA42-40CC-8724-E30A22CA84B6"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.0.26100.7392", "matchCriteriaId": "35BBEADA-D039-479B-A1BA-B2A7E37235BE"}]}]}], "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-64670", "source": "[email protected]", "tags": ["Vendor Advisory"]}]}}