2458 matches found
PT-2026-70561
Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description An integer overflow or wraparound in Windows GDI+ allows an unauthorized remote attacker to execute arbitrary code and affect the system over a network. Recommendations At the moment,...
PT-2026-70472
Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description The use of an uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally. Recommendations At the moment, there is no information about a newer...
CVE-2026-61360: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally...
CVE-2026-62709: Use of Uninitialized Resource
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...
CVE-2026-65662: Out-of-bounds Read
Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally...
PT-2026-70431
Name of the Vulnerable Software and Affected Versions Windows GDI affected versions not specified Description An untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose sensitive information locally. Recommendations At the moment, there is no information about a new...
CVE-2026-62822: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network...
CVE-2026-62890: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally...
EUVD-2026-43871
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network...
EUVD-2026-44023
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally...
EUVD-2026-43810
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally...
CVE-2026-50380
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network...
Vulnerabilities in Microsoft Windows
Microsoft has fixed a very large number of vulnerabilities in Windows. A malicious actor could exploit these vulnerabilities to carry out attacks that could result in the types of damage listed in the table below. The most serious vulnerabilities have the following identifiers: CVE-2026-49172,...
CVE-2026-54122
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally...
CVE-2026-49796
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally...
CVE-2026-50387
CVE-2026-50387 — Windows GDI Elevation of Privilege Affects: Windows GDI subsystem. The vulnerability is a stack-based buffer overflow in GDI that can be triggered by an authorized attacker to achieve local privilege escalation. Impact: Local elevation of privileges with a CVSS v3.1 base score of...
CVE-2026-50380 Windows GDI+ Remote Code Execution Vulnerability
...
CVE-2026-50380
CVE-2026-50380 is a Windows GDI+ heap-based buffer overflow that enables a remote attacker to execute code over a network. The CVE is listed among highly critical Windows vulnerabilities in July 2026 patch advisories, with Microsoft updating GDI+ and related components in the July security releas...
