Lucene search
K

463 matches found

OSV
OSV
added 2018/10/10 1:29 p.m.0 views

CVE-2018-8472

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server...

5.5CVSS7.3AI score0.02656EPSS
Exploits0References3
Microsoft CVE
Microsoft CVE
added 2018/10/09 7:0 a.m.27 views

Windows GDI Information Disclosure Vulnerability

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory, allowing an attacker to retrieve information from a targeted system. By itself, the information disclosure does not allow arbitrary code execution; however, it could...

5.5CVSS2.5AI score0.02656EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2018/10/09 12:0 a.m.164 views

KB4462937: Windows 10 Version 1703 October 2018 Security Update

The remote Windows host is missing security update 4462937. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker...

9.3CVSS8.1AI score0.81325EPSS
Exploits17References25
BDU FSTEC
BDU FSTEC
added 2018/09/28 12:0 a.m.3 views

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows GDI component in Windows operating systems arises from operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created document...

4.7CVSS7.8AI score0.24738EPSS
Exploits0References3
CNVD
CNVD
added 2018/09/21 12:0 a.m.1 views

Microsoft Windows GDI Component Information Disclosure Vulnerability

Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 are operating systems released by Microsoft Corporation in the U.S. Microsoft Windows 7 SP1 is an operating system for personal computers.Windows Server 2008 R2 SP1 is an operating system for servers. Windows Server 2008 R2 SP1 is an operatin...

6.5CVSS6.3AI score0.24738EPSS
Exploits0References1
OSV
OSV
added 2018/09/13 12:29 a.m.1 views

CVE-2018-8424

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows...

6.5CVSS7.3AI score0.21579EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2018/09/13 12:29 a.m.2 views

CVE-2018-8424

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows...

6.5CVSS5.5AI score0.24738EPSS
Exploits0References3
CNVD
CNVD
added 2018/09/13 12:0 a.m.2 views

Microsoft Windows GDI Component Information Disclosure Vulnerability (CNVD-2018-18629)

Microsoft Windows Server 2016 and others are a series of operating systems released by Microsoft Corporation in the U.S. Windows GDI is one of the graphics device interface components. An information disclosure vulnerability exists in Microsoft Windows GDI, which can be exploited by an attacker t...

6.5CVSS6.7AI score0.21579EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2018/09/04 12:0 a.m.3 views

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created document or a specially...

7.1CVSS8AI score0.02535EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2018/08/23 12:0 a.m.2 views

The vulnerability of the Graphics Device Interface component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Graphics Device Interface GDI component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page or...

7.6CVSS8.4AI score0.36198EPSS
Exploits0References3
NVD
NVD
added 2018/08/15 5:29 p.m.23 views

CVE-2018-8397

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory, aka "GDI+ Remote Code Execution Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2...

9.3CVSS9AI score0.36198EPSS
Exploits0References3
CNVD
CNVD
added 2018/08/15 12:0 a.m.1 views

Microsoft Windows GDI Information Disclosure Vulnerability (CNVD-2018-17056)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Windows Graphics Device Interface GDI is one of these graphics device interfaces. An information disclosure vulnerability exists in Microsoft Windows GDI. A remote attacker can exploit...

6.5CVSS6.1AI score0.21558EPSS
Exploits0References1
CNVD
CNVD
added 2018/08/15 12:0 a.m.3 views

Microsoft Windows GDI Information Disclosure Vulnerability (CNVD-2018-17055)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Windows Graphics Device Interface GDI is one of these graphics device interfaces. An information disclosure vulnerability exists in Microsoft Windows GDI. A remote attacker could exploi...

6.5CVSS6.1AI score0.21558EPSS
Exploits0References1
CNVD
CNVD
added 2018/08/15 12:0 a.m.3 views

Microsoft Windows GDI+ Component Remote Code Execution Vulnerability

Microsoft Windows 7 SP1 and Windows Server 2008 are a family of operating systems released by Microsoft Corporation.Microsoft Windows 7 SP1 is a set of operating systems for personal computers.Windows Server 2008 is a set of server operating systems.... Windows Graphics Device Interface GDI is on...

9.3CVSS8.8AI score0.36198EPSS
Exploits0References1
CNVD
CNVD
added 2018/08/15 12:0 a.m.4 views

Microsoft Windows GDI Information Disclosure Vulnerability (CNVD-2018-17082)

Microsoft Windows 7 SP1 and others are a series of operating systems released by Microsoft.Windows Graphics Device Interface GDI is one of the graphics device interfaces. An information disclosure vulnerability exists in Microsoft Windows GDI. A remote attacker could exploit this vulnerability to...

4.7CVSS5.4AI score0.02535EPSS
Exploits0References1
OSV
OSV
added 2018/04/19 8:29 p.m.1 views

CVE-2018-0255

A vulnerability in the device manager web interface of Cisco Industrial Ethernet Switches could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against a user of an affected system. The vulnerability is due to insufficient CSRF protection by the devic...

8.8CVSS5.8AI score0.00192EPSS
Exploits0References2
CNVD
CNVD
added 2018/03/15 12:0 a.m.2 views

Microsoft Windows GDI elevation of privilege vulnerability (CNVD-2018-07324)

Microsoft Windows Server 2008 SP2 and so on are a series of operating systems from Microsoft.Windows Graphics Device Interface GDI is one of the application program interfaces, whose main task is to be responsible for the exchange of information between the system and the graphics program, as wel...

7CVSS7.4AI score0.01133EPSS
Exploits0References1
OSV
OSV
added 2018/03/14 5:29 p.m.0 views

CVE-2018-0815

The Windows Graphics Device Interface GDI in Microsoft Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows GDI Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0816, a...

7CVSS7.1AI score0.01133EPSS
Exploits0References3
Prion
Prion
added 2018/03/14 5:29 p.m.26 views

Privilege escalation

The Windows Graphics Device Interface GDI in Microsoft Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows GDI Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0816, a...

6.9CVSS6.7AI score0.01133EPSS
Exploits0References3Affected Software2
Prion
Prion
added 2018/03/14 5:29 p.m.25 views

Privilege escalation

The Windows Graphics Device Interface GDI in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege...

6.9CVSS6.7AI score0.01133EPSS
Exploits0References3Affected Software5
Rows per page
Query Builder