30 matches found
PT-2026-112657
Name of the Vulnerable Software and Affected Versions Windows Direct Composition affected versions not specified Description A heap-based buffer overflow exists in Windows Direct Composition. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occu...
Microsoft Windows: CVE-2026-83922: Windows Direct Composition Elevation of Privilege Vulnerability
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83912: Windows Direct Composition Elevation of Privilege Vulnerability
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83903: Windows Direct Composition Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83896: Windows Direct Composition Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83902: Windows Direct Composition Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-85902: Windows Direct Composition Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally...
PT-2024-11633 ¡ Microsoft ¡ Windows 11 +1
Name of the Vulnerable Software and Affected Versions: Windows 11 version 10.0.22000.593 Windows Server 2022 version 10.0.20348.643 Description: An access violation issue exists in the DirectComposition functionality of the win32kbase.sys driver. A specially-crafted set of syscalls can lead to a...
October 8, 2024âKB5044281 (OS Build 20348.2762)
None None...
Snapshot fuzzing direct composition with WTF
Cisco Talos has developed a custom fuzzer using the popular snapshot fuzzer "WTF" which targets Direct Composition in Windows. Talos vulnerability research team used Protocol Buffers developed by Google to serialize and deserialize test cases. The Bochscpu backend of WTF was patched and other...