2610 matches found
CVE-2016-0040
CVE-2016-0040 This exploit builds upon SMMRootkit's 32Bit project https://github.com/Rootkitsmm/cve-2016-0040 which causes this vulnerability to trigger a BSoD with all 'a's in RCX and 'B's in RAX. It was ported to 64Bit Windows 7 SP1 and doesn't use the "mov rcx+06h, rax" instruction for inital...
BrokenType
BrokenType BrokenType is a set of tools designed to test the robustness and security of font rasterization software, especially codebases prone to memory corruption issues written in C/C++ and similar languages. It consists of the following components: TrueType program generator - a Python script...
Astra Linux – Vulnerability in freerdp3
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, deleting offscreen bitmaps caused gdi-drawing to point to freed memory, leading to UAF when related update packets arrived. A malicious server could trigger client-side use after the objects were freed,...
Astra Linux – vulnerability in freerdp3
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.0, the gdisurfacebits function processed SURFACEBITSCOMMAND messages sent by the RDP server. When these commands were handled via NSCodec, the bmp.width and bmp.height values provided by the server were not...
Astra Linux – Vulnerability in freerdp3, freerdp2
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurred in the gdiSurfaceToSurface path of the FreeRDP client due to a mismatch between destination rectangle clamping and the actual copy size. A malicious server can...
Astra Linux – vulnerability in freerdp2
FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions contain an IntegerOverflow vulnerability that leads to an Out-of-Bounds Write flaw in the gdiCreateSurface function. This issue affects only FreeRDP-based clients; FreeRDP...
Windows GDI+ Code Execution
The vulnerability of the Windows GDI+ component of the Windows operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2026-85797
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network...
CVE-2026-83934
Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network...
CVE-2026-83929
Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network...
CVE-2026-83860
Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network...
CVE-2026-83651
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network...
CVE-2026-70089
Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network...
CVE-2026-69884
Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally...
EUVD-2026-100115
Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally...
CVE-2026-69884
A buffer over-read vulnerability exists in Windows GDI . This flaw allows an authorized attacker to perform a local privilege elevation . The vulnerability is associated with CWE-126 . While the documents confirm the impact is high for confidentiality, integrity, and availability, no specific exp...
EUVD-2026-100061
Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network...
CVE-2026-83934
A stack-based buffer overflow vulnerability exists in Windows GDI+ , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as HIGH severity with a CVSS 3.1 score of 8.8, as it could impact confidentiality, integrity, and availabilit...
CVE-2026-83860
A stack-based buffer overflow vulnerability exists in Windows GDI . This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is categorized under CWE-121 . No specific software versions, internal component files, or remediation detail...