2224 matches found
CVE-2026-65662
CVE-2026-65662 describes an out-of-bounds read in Windows GDI that allows an authorized local attacker to disclose information. The vulnerability impacts Windows GDI components and is rated with a CVSS v3.1 base score of 5.5 (Medium) , with local attack vector, low attack complexity, and low priv...
CVE-2026-65662 Windows GDI Information Disclosure Vulnerability
...
EUVD-2026-56434
Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally...
EUVD-2026-56402
Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally...
CVE-2026-62890
CVE-2026-62890 is a heap-based buffer overflow in Windows GDI+ that allows an authorized attacker to execute code locally. CVSS v3.1 base score 7.8 (HIGH) with LOCAL attack vector, requiring LOW privileges and no user interaction; impact to confidentiality, integrity, and availability is HIGH. No...
CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability
...
CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability
...
Windows GDI Information Disclosure Vulnerability
Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally...
Windows GDI+ Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally...
Windows GDI+ Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network...
Windows GDI+ Information Disclosure Vulnerability
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...
Windows GDI Information Disclosure Vulnerability
Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally...
PT-2026-70654
Name of the Vulnerable Software and Affected Versions Windows GDI affected versions not specified Description An out-of-bounds read in Windows GDI allows an authorized attacker to disclose sensitive information locally, which may affect the system. Recommendations At the moment, there is no...
PT-2026-70585
Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description A heap-based buffer overflow occurs in Windows GDI+, which is a graphics API used for rendering images and shapes. This issue allows an authorized attacker to execute code locally or a...
PT-2026-70472
Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description The use of an uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally. Recommendations At the moment, there is no information about a newer...
PT-2026-70561
Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description An integer overflow or wraparound in Windows GDI+ allows an unauthorized remote attacker to execute arbitrary code and affect the system over a network. Recommendations At the moment,...
PT-2026-70431
Name of the Vulnerable Software and Affected Versions Windows GDI affected versions not specified Description An untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose sensitive information locally. Recommendations At the moment, there is no information about a new...
Astra Linux – Vulnerability in freerdp3
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, deleting offscreen bitmaps caused gdi-drawing to point to freed memory, leading to UAF when related update packets arrived. A malicious server could trigger client-side use after the objects were freed,...
Astra Linux – Vulnerability in freerdp3
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.0, the gdisurfacebits function processed SURFACEBITSCOMMAND messages sent by the RDP server. When these commands were processed using NSCodec, the bmp.width and bmp.height values provided by the server were not...
Astra Linux – Vulnerability in freerdp3
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurred in the gdiSurfaceToSurface path of the FreeRDP client due to a mismatch between destination rectangle clamping and the actual copy size. A malicious server can...