Lucene search
+L

569 matches found

Positive Technologies
Positive Technologies
•added 2017/03/14 12:00 a.m.•9 views

PT-2017-1627 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Graphics Device Interface application of the Windows operating system. It allows a local attacker to potentially elevate their...

7.8CVSS7.9AI score0.01858EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2017/03/14 12:00 a.m.•11 views

PT-2017-1598 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Windows Graphics Device Interface GDI and involves a lack of protection for internal data. This can be exploited by an attacker with local access to obtain...

5.5CVSS6.3AI score0.15939EPSS
SaveExploits2References9
VulnCheck KEV
VulnCheck KEV
•added 2017/03/14 12:00 a.m.•16 views

VulnCheck KEV: CVE-2017-0005

The Graphics Device Interface GDI in Microsoft Windows allows local users to gain privileges via a crafted application...

7.8CVSS7.6AI score0.11022EPSS
SaveIn wildExploits1References9
Positive Technologies
Positive Technologies
•added 2017/03/14 12:00 a.m.•12 views

PT-2017-1589 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the lack of protection for system data in the Windows operating system. It can be exploited by a remote attacker using a specially crafted website, potentially leadi...

4.3CVSS6.8AI score0.33359EPSS
SaveExploits0References8
Prion
Prion
•added 2017/02/20 4:59 p.m.•36 views

Design/Logic Flaw

gdi32.dll in Graphics Device Interface GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process heap...

4.3CVSS5.5AI score0.821EPSS
SaveExploits9References7Affected Software3
CNVD
CNVD
•added 2016/10/16 12:00 a.m.•38 views

Microsoft Windows GDI Remote Code Execution Vulnerability

Microsoft Windows is a popular operating system. A security vulnerability exists in Microsoft Windows where the GDI component fails to properly handle embedded fonts, allowing remote attackers to exploit the vulnerability to build malicious fonts that can be parsed by the user and can be executed...

9.3CVSS6.9AI score0.24376EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/10/16 12:00 a.m.•21 views

Microsoft Windows Graphics Component Information Disclosure Vulnerability

Microsoft Windows is a popular operating system. A security vulnerability exists in the Microsoft Windows GDI component that does not properly handle objects in memory, which could be exploited by remote attackers to obtain sensitive system information...

5.5CVSS6.7AI score0.31976EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2016/10/14 2:59 a.m.•18 views

CVE-2016-3396

Graphics Device Interface aka GDI or GDI+ in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync...

7.8CVSS6.2AI score0.24376EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2016/10/14 2:59 a.m.•8 views

CVE-2016-3393

Graphics Device Interface aka GDI or GDI+ in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted web site,...

7.8CVSS6.1AI score0.68465EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2016/10/14 2:59 a.m.•13 views

CVE-2016-3263

Graphics Device Interface aka GDI or GDI+ in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync...

5.5CVSS5.8AI score0.31976EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2016/10/14 2:59 a.m.•10 views

CVE-2016-3209

Graphics Device Interface aka GDI or GDI+ in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync...

5.5CVSS5.8AI score0.53653EPSS
SaveExploits1References3
Prion
Prion
•added 2016/10/14 2:59 a.m.•28 views

Information disclosure

Graphics Device Interface aka GDI or GDI+ in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync...

5CVSS5.4AI score0.31976EPSS
SaveExploits0References3Affected Software9
Cvelist
Cvelist
•added 2016/10/14 1:00 a.m.•39 views

CVE-2016-3263

Graphics Device Interface aka GDI or GDI+ in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync...

6.2AI score0.31976EPSS
SaveExploits0References3
CVE
CVE
•added 2016/10/14 1:00 a.m.•156 views

CVE-2016-3209

CVE-2016-3209 affects Microsoft GDI+ across Windows Vista/7/8.1/Server 2008-2012 and various Office/.NET components, enabling information disclosure by bypassing ASLR through unspecified vectors. Connected sources confirm exploitation activity (e.g., Exploit DB). Public references note MS16-120 a...

5.5CVSS6AI score0.53653EPSS
SaveExploits1References3Affected Software14
Vulnrichment
Vulnrichment
•added 2016/10/14 1:00 a.m.•20 views

CVE-2016-3393

Graphics Device Interface aka GDI or GDI+ in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted web site,...

8.8AI score0.68465EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2016/10/14 1:00 a.m.•51 views

CVE-2016-3209

Graphics Device Interface aka GDI or GDI+ in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync...

6.2AI score0.53653EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/10/14 12:00 a.m.•6 views

CVE-2016-3263: Exposure of Sensitive Information to an Unauthorized Actor

Graphics Device Interface aka GDI or GDI+ in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync...

5.5CVSS8.2AI score0.31976EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/10/14 12:00 a.m.•7 views

CVE-2016-3393: Undefined Security Weakness

Graphics Device Interface aka GDI or GDI+ in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted web site,...

9.3CVSS8.8AI score0.68465EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/10/14 12:00 a.m.•5 views

CVE-2016-3262: Exposure of Sensitive Information to an Unauthorized Actor

Graphics Device Interface aka GDI or GDI+ in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync...

5.5CVSS8.2AI score0.31976EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/10/14 12:00 a.m.•6 views

CVE-2016-3396: Undefined Security Weakness

Graphics Device Interface aka GDI or GDI+ in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync...

9.3CVSS8.8AI score0.24376EPSS
SaveExploits0References2
Rows per page
Query Builder