CVE-2021-28349 Windows GDI+ Remote Code Execution Vulnerability

...

CVE-2021-28349

Technical details (affected products/versions, root cause, exploit specifics, remediation) for CVE-2021-28349 are not provided in the connected documents. Monitor official advisories and vulnerability feeds for updates.

CVE-2021-28348

CVE-2021-28348 is described in the NVD entry as a Windows GDI+ Remote Code Execution Vulnerability. The NVD metrics show CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attacker complexity, PRIVILEGES REQUIRED: LOW, NONE user interaction, and impacts to Confidentiality, Integrity, an...

CVE-2021-28348 Windows GDI+ Remote Code Execution Vulnerability

...

CVE-2021-28318 Windows GDI+ Information Disclosure Vulnerability

...

CVE-2021-28318 Windows GDI+ Information Disclosure Vulnerability

...

CVE-2021-28318

Technical details about CVE-2021-28318 are not provided in the initial document or any connected items. No affected products, vulnerable components, impact, or remediation are specified. Monitor official advisories for updates.

Windows GDI+ Information Disclosure Vulnerability

...

Windows GDI+ Remote Code Execution Vulnerability

...

Windows GDI+ Remote Code Execution Vulnerability

...

KLA12142 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service, gain privileges, bypass security restrictions, spoof user interface. Below is a...

KLA12139 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges, execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of...

Microsoft Windows GDI+ 代码注入漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. A remote code execution vulnerability exists in GDI in Microsoft Windows and Windows Server, which can be...

Microsoft Windows GDI+ 代码注入漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in GDI+ in Microsoft Windows and Windows...

KB5001339: Windows 10 version 1803 Security Update (April 2021)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Win32k Elevation of Privilege Vulnerability CVE-2021-27072, CVE-2021-28310 - Windows Media Photo Codec Information Disclosure Vulnerability CVE-2021-27079 - Windows Event Tracing Elevati...

KB5001387: Windows Server 2012 Security Update (Apr 2021)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Win32k Elevation of Privilege Vulnerability CVE-2021-27072 - Microsoft Internet Messaging API Remote Code Execution Vulnerability CVE-2021-27089 - RPC Endpoint Mapper Service Elevation o...

PT-2021-2681 · Microsoft · Windows Gdi +1

Name of the Vulnerable Software and Affected Versions: Windows GDI+ affected versions not specified Description: The issue exists due to insufficient input validation in the Windows Graphics Device Interface Plus GDI+ component of Windows operating systems. This can allow an attacker to gain...

PT-2021-2661 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to incorrect code generation management in the GDI+ component of Microsoft Windows operating systems. This allows a remote attacker to execute arbitrary code on the...

PT-2021-2719 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to incorrect code generation management in the GDI+ component of Microsoft Windows operating systems. It allows remote attackers to execute arbitrary code using a...

KB5001382: Windows 8.1 and Windows Server 2012 R2 Security Update (Apr 2021)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Win32k Elevation of Privilege Vulnerability CVE-2021-27072 - Microsoft Internet Messaging API Remote Code Execution Vulnerability CVE-2021-27089 - RPC Endpoint Mapper Service Elevation o...