Lucene search
+L

2234 matches found

Positive Technologies
Positive Technologies
added 2023/09/12 12:00 a.m.4 views

PT-2023-5056 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Windows GDI component and is associated with insufficient access restrictions. It allows an attacker to elevate their privileges. There is no information provide...

7.8CVSS9.3AI score0.0059EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2023/09/12 12:00 a.m.179 views

KB5030213: Windows 10 Version 1607 and Windows Server 2016 Security Update (September 2023)

The remote Windows host is missing security update 5030213. It is, therefore, affected by multiple vulnerabilities - DHCP Server Service Denial of Service Vulnerability CVE-2023-38162 - Windows GDI Elevation of Privilege Vulnerability CVE-2023-36804, CVE-2023-38161 - DHCP Server Service Informati...

8.8CVSS6.7AI score0.25807EPSS
SaveExploits0References17
Tenable Nessus
Tenable Nessus
added 2023/09/12 12:00 a.m.64 views

KB5030220: Windows 10 LTS 1507 Security Update (September 2023)

The remote Windows host is missing security update 5030220. It is, therefore, affected by multiple vulnerabilities - Windows GDI Elevation of Privilege Vulnerability CVE-2023-36804, CVE-2023-38161 - Windows TCP/IP Denial of Service Vulnerability CVE-2023-38149 - Windows Miracast Wireless Display...

8.8CVSS6.9AI score0.06003EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
added 2023/09/12 12:00 a.m.137 views

KB5030287: Windows Server 2012 R2 Security Update (September 2023)

The remote Windows host is missing security update 5030287. It is, therefore, affected by multiple vulnerabilities - DHCP Server Service Denial of Service Vulnerability CVE-2023-38162 - Windows GDI Elevation of Privilege Vulnerability CVE-2023-36804, CVE-2023-38161 - DHCP Server Service Informati...

7.8CVSS6.7AI score0.25807EPSS
SaveExploits0References15
BDU FSTEC
BDU FSTEC
added 2023/09/04 12:00 a.m.11 views

Vulnerability of the gdi_CreateSurface() function in RDP clients of FreeRDP, allowing attackers to cause service interruptions

The vulnerability of the gdiCreateSurface function in the RDP client FreeRDP is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

6.5CVSS7.5AI score0.01357EPSS
SaveExploits1References9Affected Software3
SUSE CVE
SUSE CVE
added 2023/09/02 1:54 a.m.9 views

SUSE CVE-2023-39356

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a missing offset validation may lead to an Out Of Bound Read in the function gdimultiopaquerect. In particular there is no code to validate if the value...

5.3CVSS9.4AI score0.01809EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2023/09/02 1:54 a.m.9 views

SUSE CVE-2023-40186

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the gdiCreateSurface function. This issue affects FreeRDP based clients only. FreeRDP proxies...

6.5CVSS6.9AI score0.01357EPSS
SaveExploits1References5
NVD
NVD
added 2023/08/31 10:15 p.m.24 views

CVE-2023-40186

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the gdiCreateSurface function. This issue affects FreeRDP based clients only. FreeRDP proxies...

9.8CVSS7.9AI score0.01357EPSS
SaveExploits1References8
OSV
OSV
added 2023/08/31 10:15 p.m.5 views

DEBIAN-CVE-2023-40186

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the gdiCreateSurface function. This issue affects FreeRDP based clients only. FreeRDP proxies...

9.8CVSS7.4AI score0.01357EPSS
SaveExploits1References1
OSV
OSV
added 2023/08/31 10:15 p.m.10 views

UBUNTU-CVE-2023-40186

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the gdiCreateSurface function. This issue affects FreeRDP based clients only. FreeRDP proxies...

9.8CVSS6.9AI score0.01357EPSS
SaveExploits1References5
OSV
OSV
added 2023/08/31 9:15 p.m.7 views

DEBIAN-CVE-2023-39356

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a missing offset validation may lead to an Out Of Bound Read in the function gdimultiopaquerect. In particular there is no code to validate if the value...

9.1CVSS7AI score0.01809EPSS
SaveExploits1References1
OSV
OSV
added 2023/08/31 9:15 p.m.16 views

UBUNTU-CVE-2023-39356

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a missing offset validation may lead to an Out Of Bound Read in the function gdimultiopaquerect. In particular there is no code to validate if the value...

9.1CVSS7.3AI score0.01809EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2023/08/31 12:00 a.m.7 views

FreeRDP 缓冲区错误漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer error vulnerability that stems from an out-of-bounds read due to missing offset validation in the gdimultiopaquerect function...

9.1CVSS7.6AI score0.01809EPSS
SaveExploits1References14
Positive Technologies
Positive Technologies
added 2023/08/28 12:00 a.m.9 views

PT-2023-4658 · Freerdp +8 · Freerdp +8

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.11.0 FreeRDP versions prior to 3.0.0-beta3 Description: The issue affects FreeRDP based clients only, due to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the gdi CreateSurface function. This ma...

9.8CVSS6.5AI score0.0372EPSS
SaveExploits25References312
Positive Technologies
Positive Technologies
added 2023/07/28 12:00 a.m.10 views

PT-2023-4670 · Freerdp +8 · Freerdp +8

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.11.0 FreeRDP versions prior to 3.0.0-beta3 Description: The issue is related to a missing offset validation in the gdi multi opaque rect function, which can lead to an Out Of Bound Read error. This occurs when the...

9.8CVSS6.5AI score0.0372EPSS
SaveExploits25References308
BDU FSTEC
BDU FSTEC
added 2023/06/23 12:00 a.m.16 views

The vulnerability of the Windows GDI component of the Windows operating system, which allows attackers to escalate their privileges

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.4AI score0.0473EPSS
SaveExploits0References2
NVD
NVD
added 2023/06/14 12:15 a.m.20 views

CVE-2023-29371

Windows GDI Elevation of Privilege Vulnerability...

7.8CVSS8.6AI score0.05391EPSS
SaveExploits0References1
NVD
NVD
added 2023/06/14 12:15 a.m.29 views

CVE-2023-29359

GDI Elevation of Privilege Vulnerability...

7.8CVSS8.6AI score0.00549EPSS
SaveExploits0References1
NVD
NVD
added 2023/06/14 12:15 a.m.15 views

CVE-2023-29358

Windows GDI Elevation of Privilege Vulnerability...

7.8CVSS8.6AI score0.0473EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/14 12:15 a.m.18 views

Privilege escalation

Windows GDI Elevation of Privilege Vulnerability...

4.3CVSS8AI score0.05391EPSS
SaveExploits0References1Affected Software9
Rows per page
Query Builder