Lucene search
+L

328 matches found

Symantec
Symantec
added 2019/11/12 12:0 a.m.36 views

Microsoft Windows 'DirectWrite' API CVE-2019-1411 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 16...

7.7AI score0.04888EPSS
SaveExploits0Affected Software3
Tenable Nessus
Tenable Nessus
added 2019/11/12 12:0 a.m.69 views

KB4525253: Windows Server 2012 November 2019 Security Update

The remote Windows host is missing security update 4525253 or cumulative update 4525246. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an...

9.9CVSS8.3AI score0.75859EPSS
SaveExploits33References42
BDU FSTEC
BDU FSTEC
added 2019/10/03 12:0 a.m.6 views

The vulnerability of the DirectWrite programming interface in Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information through a specially crafted document or web page...

7.8CVSS5.5AI score0.12096EPSS
SaveExploits2References2
BDU FSTEC
BDU FSTEC
added 2019/10/01 12:0 a.m.7 views

The vulnerability of the DirectWrite programming interface in Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially created document or visiting a...

5.5CVSS5.5AI score0.01699EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/10/01 12:0 a.m.9 views

The vulnerability of the DirectWrite programming interface in Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information by opening a specially...

7.8CVSS5.5AI score0.12885EPSS
SaveExploits2References2
exploitpack
exploitpack
added 2019/09/12 12:0 a.m.51 views

Microsoft DirectWrite - Out-of-Bounds Read in sfac_GetSbitBitmap While Processing TTF Fonts

Microsoft DirectWrite - Out-of-Bounds Read in sfacGetSbitBitmap While Processing TTF Fonts Microsoft DirectWrite is a modern Windows API for high-quality text rendering. A majority of its code resides in the DWrite.dll user-mode library. It is used by a variety of widely used desktop programs suc...

0.6AI score
SaveExploits0
exploitpack
exploitpack
added 2019/09/12 12:0 a.m.40 views

Microsoft DirectWrite - Invalid Read in SplicePixel While Processing OTF Fonts

Microsoft DirectWrite - Invalid Read in SplicePixel While Processing OTF Fonts Microsoft DirectWrite is a modern Windows API for high-quality text rendering. A majority of its code resides in the DWrite.dll user-mode library. It is used by a variety of widely used desktop programs such as the...

SaveExploits0
zdt
zdt
added 2019/09/12 12:0 a.m.87 views

Microsoft DirectWrite - Invalid Read in SplicePixel While Processing OTF Fonts Exploit

Microsoft DirectWrite is a modern Windows API for high-quality text rendering. A majority of its code resides in the DWrite.dll user-mode library. It is used by a variety of widely used desktop programs such as the Chrome, Firefox and Edge browsers and constitutes an attack surface for memory...

6.5CVSS6.5AI score0.12885EPSS
SaveExploits2
zdt
zdt
added 2019/09/12 12:0 a.m.81 views

Microsoft DirectWrite - Out-of-Bounds Read in sfac_GetSbitBitmap While Processing TTF Fonts Exploit

Microsoft DirectWrite is a modern Windows API for high-quality text rendering. A majority of its code resides in the DWrite.dll user-mode library. It is used by a variety of widely used desktop programs such as web browsers and constitutes an attack surface for memory corruption bugs, as it...

6.5CVSS7.1AI score0.12096EPSS
SaveExploits2
Exploit DB
Exploit DB
added 2019/09/12 12:0 a.m.269 views

Microsoft DirectWrite - Invalid Read in SplicePixel While Processing OTF Fonts

Microsoft DirectWrite is a modern Windows API for high-quality text rendering. A majority of its code resides in the DWrite.dll user-mode library. It is used by a variety of widely used desktop programs such as the Chrome, Firefox and Edge browsers and constitutes an attack surface for memory...

6.5CVSS5.8AI score0.12885EPSS
SaveExploits2
Exploit DB
Exploit DB
added 2019/09/12 12:0 a.m.283 views

Microsoft DirectWrite - Out-of-Bounds Read in sfac_GetSbitBitmap While Processing TTF Fonts

Microsoft DirectWrite is a modern Windows API for high-quality text rendering. A majority of its code resides in the DWrite.dll user-mode library. It is used by a variety of widely used desktop programs such as web browsers and constitutes an attack surface for memory corruption bugs, as it...

6.5CVSS5.8AI score0.12096EPSS
SaveExploits2
OSV
OSV
added 2019/09/11 10:15 p.m.2 views

CVE-2019-1251

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1244, CVE-2019-1245...

5.5CVSS6.3AI score0.01699EPSS
SaveExploits0References1
NVD
NVD
added 2019/09/11 10:15 p.m.21 views

CVE-2019-1251

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1244, CVE-2019-1245...

5.5CVSS5.4AI score0.01699EPSS
SaveExploits0References1
OSV
OSV
added 2019/09/11 10:15 p.m.3 views

CVE-2019-1245

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1244, CVE-2019-1251...

6.5CVSS6.3AI score0.12885EPSS
SaveExploits2References1
NVD
NVD
added 2019/09/11 10:15 p.m.19 views

CVE-2019-1244

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1245, CVE-2019-1251...

6.5CVSS5.4AI score0.12096EPSS
SaveExploits2References1
NVD
NVD
added 2019/09/11 10:15 p.m.22 views

CVE-2019-1245

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1244, CVE-2019-1251...

6.5CVSS5.4AI score0.12885EPSS
SaveExploits2References1
OSV
OSV
added 2019/09/11 10:15 p.m.2 views

CVE-2019-1244

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1245, CVE-2019-1251...

6.5CVSS6.2AI score0.12096EPSS
SaveExploits2References1
Prion
Prion
added 2019/09/11 10:15 p.m.18 views

Information disclosure

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1244, CVE-2019-1245...

2.1CVSS5.5AI score0.12885EPSS
SaveExploits4References1Affected Software2
Prion
Prion
added 2019/09/11 10:15 p.m.23 views

Information disclosure

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1244, CVE-2019-1251...

4.3CVSS5.5AI score0.12885EPSS
SaveExploits4References1Affected Software5
Prion
Prion
added 2019/09/11 10:15 p.m.19 views

Information disclosure

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1245, CVE-2019-1251...

4.3CVSS5.5AI score0.12885EPSS
SaveExploits4References1Affected Software5
Rows per page
Query Builder