CVE-2025-65117

High · 7.7

CVSS

7.7

EPSS

0.2%

Published

Jan 16, 2026

CISA due date

—

The record

The vulnerability, if exploited, could allow an authenticated miscreant (Process Optimization Designer User) to embed OLE objects into graphics, and escalate their privileges to the identity of a victim user who subsequently interacts with the graphical elements.

Affected packages

Ecosystem	Package	Introduced	Fixed