Vulnerable WindowsCodecs.dll Loaded By Non-Standard Process

Tim Peck@timpeck

•updated Dec 23, 2025•6•0•121

Detects the loading of a vulnerable version of WindowsCodecs.dll (related to CVE-2025-50165) by non-standard applications. This could indicate an attempt to exploit the vulnerability in a custom or unexpected application context.