Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

2224 matches found

OSV
OSV•added 2017/09/13 1:29 a.m.•7 views

CVE-2017-8685

Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GDI+ Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8684 and CVE-2017-8688...

5.5CVSS5.8AI score0.03044EPSS
SaveExploits3References4
OSV
OSV•added 2017/09/13 1:29 a.m.•4 views

CVE-2017-8677

The Windows GDI+ component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly discloses kerne...

5.5CVSS5.8AI score0.03661EPSS
SaveExploits1References3
NVD
NVD•added 2017/09/13 1:29 a.m.•21 views

CVE-2017-8676

The Windows Graphics Device Interface GDI in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016;...

3.3CVSS4.7AI score0.1404EPSS
SaveExploits0References3
NVD
NVD•added 2017/09/13 1:29 a.m.•20 views

CVE-2017-8677

The Windows GDI+ component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly discloses kerne...

5.5CVSS5AI score0.03661EPSS
SaveExploits1References3
Prion
Prion•added 2017/09/13 1:29 a.m.•27 views

Information disclosure

The Windows GDI+ component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly discloses kerne...

2.1CVSS5AI score0.0423EPSS
SaveExploits13References3Affected Software3
Prion
Prion•added 2017/09/13 1:29 a.m.•20 views

Information disclosure

The Windows Graphics Device Interface GDI in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016;...

2.1CVSS4.9AI score0.1404EPSS
SaveExploits0References3Affected Software7
Prion
Prion•added 2017/09/13 1:29 a.m.•26 views

Information disclosure

Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1, allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GDI+ Information Disclosure Vulnerability". This CVE ID is...

2.1CVSS5.1AI score0.0427EPSS
SaveExploits6References4Affected Software3
Prion
Prion•added 2017/09/13 1:29 a.m.•29 views

Information disclosure

Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GDI+ Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8684 and CVE-2017-8688...

2.1CVSS5.1AI score0.0427EPSS
SaveExploits6References4Affected Software2
Prion
Prion•added 2017/09/13 1:29 a.m.•31 views

Information disclosure

Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GD...

2.1CVSS5.1AI score0.0427EPSS
SaveExploits6References3Affected Software4
CVE
CVE•added 2017/09/13 1:00 a.m.•105 views

CVE-2017-8677

CVE-2017-8677 is a Win32k/GDI+-related information-disclosure vulnerability in Windows that exposes kernel memory addresses when handling GDI+ objects. Affected products include Windows kernel/UI components on Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows 10 (various builds)...

5.5CVSS5.3AI score0.03661EPSS
SaveExploits1References3Affected Software7
CVE
CVE•added 2017/09/13 1:00 a.m.•155 views

CVE-2017-8676

CVE-2017-8676 is an information disclosure vulnerability in the Windows GDI+ component. The NVD entry describes that an authenticated attacker can retrieve information from the targeted system by presenting a specially crafted application, affecting a wide range of Windows versions (Windows clien...

3.3CVSS4.9AI score0.1404EPSS
SaveExploits0References3Affected Software14
Cvelist
Cvelist•added 2017/09/13 1:00 a.m.•40 views

CVE-2017-8688

Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GD...

5.5AI score0.03661EPSS
SaveExploits0References3
CVE
CVE•added 2017/09/13 1:00 a.m.•100 views

CVE-2017-8684

CVE-2017-8684 corresponds to a Windows kernel memory disclosure in win32k NtGdiGetFontResourceInfoInternalW. The vulnerability stems from writing kernel outputs to a user-provided buffer and then copying the entire requested size back to user mode, exposing uninitialized stack memory (≈92 bytes) ...

5.5CVSS5.4AI score0.0427EPSS
SaveExploits3References4Affected Software5
CVE
CVE•added 2017/09/13 1:00 a.m.•91 views

CVE-2017-8685

CVE-2017-8685 refers to a Windows kernel memory disclosure in win32k NtGdiEngCreatePalette. The vulnerability exposes uninitialized 1 KB of kernel stack memory when user-mode passes a palette color list, due to a missing pre-initialization step in the temporary kernel buffer and how the palette i...

5.5CVSS5.1AI score0.03044EPSS
SaveExploits3References4Affected Software2
CVE
CVE•added 2017/09/13 1:00 a.m.•95 views

CVE-2017-8688

CVE-2017-8688 is a Windows GDI+ information-disclosure issue that leaks kernel-memory addresses through GDI+ memory handling. Affected products include Windows 7 SP1, 8.1, Server 2008 SP2/R2 SP1, and Windows 10 variants up to 1703/Server 2016. Connected analysis documents reveal related kernel me...

5.5CVSS6.1AI score0.03661EPSS
SaveExploits0References3Affected Software7
Cvelist
Cvelist•added 2017/09/13 1:00 a.m.•49 views

CVE-2017-8676

The Windows Graphics Device Interface GDI in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016;...

5AI score0.1404EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2017/09/13 1:00 a.m.•47 views

CVE-2017-8685

Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GDI+ Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8684 and CVE-2017-8688...

5.5AI score0.03044EPSS
SaveExploits3References4
Cvelist
Cvelist•added 2017/09/13 1:00 a.m.•39 views

CVE-2017-8677

The Windows GDI+ component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly discloses kerne...

5.5AI score0.03661EPSS
SaveExploits1References3
Cvelist
Cvelist•added 2017/09/13 1:00 a.m.•46 views

CVE-2017-8684

Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1, allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GDI+ Information Disclosure Vulnerability". This CVE ID is...

5.5AI score0.0427EPSS
SaveExploits3References4
CNVD
CNVD•added 2017/09/13 12:00 a.m.•51 views

Microsoft Windows GDI+ Information Disclosure Vulnerability (CNVD-2017-33472)

Microsoft Windows Server 2008 SP2 and others are a series of operating systems released by Microsoft.GDI+ component is one of the graphics components. An information disclosure vulnerability exists in the GDI+ component of Microsoft Windows, which arises from a program's failure to properly publi...

5.5CVSS6.3AI score0.0427EPSS
SaveExploits3References1
Rows per page
Query Builder