Privilege escalation

Windows GDI Elevation of Privilege Vulnerability...

Microsoft Patch Tuesday for January 2023 — Snort rules and prominent vulnerabilities

Microsoft released its monthly security update on Tuesday, disclosing 98 vulnerabilities. Of these vulnerabilities, 11 are classified as "Critical", 87 are classified as "Important", no vulnerability classified as "Moderate." According to Microsoft all "Critical" vulnerability are either less...

Windows GDI Elevation of Privilege Vulnerability

...

Windows GDI Elevation of Privilege Vulnerability

...

CVE-2023-21552 Windows GDI Elevation of Privilege Vulnerability

...

KLA20158 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information. Below is a complete list of...

PT-2023-1143 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Windows GDI component and is caused by insufficient access restrictions. It allows an attacker to elevate their privileges. Recommendations: At the moment, there...

CVE-2023-21552 Windows GDI Elevation of Privilege Vulnerability

...

CVE-2023-21532

Technical details about CVE-2023-21532 (product, root cause, impact, fixed version) are not publicly provided in the connected documents you supplied. Monitor for updates and additional vulnerability specifics.

CVE-2023-21532 Windows GDI Elevation of Privilege Vulnerability

...

CVE-2023-21552

CVE-2023-21552 is documented in an NCSC advisory as a Windows Graphics Component vulnerability (Windows GDI) with CVSS v3.1 base score 7.80, affecting privilege escalation. The NCSC listing confirms its classification as an elevation of privileges issue in Windows Graphics/Graphics Device Interfa...

The vulnerability of the Windows GDI+ interface on Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Windows GDI+ graphics device interfaces on Windows operating systems is related to insufficient protection of system data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information using a specially created malicious file...

NewStart CGSL MAIN 6.02 : freerdp Multiple Vulnerabilities (NS-SA-2022-0097)

The remote NewStart CGSL host, running version MAIN 6.02, has freerdp packages installed that are affected by multiple vulnerabilities: - FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gatewa...

CVE-2022-41098

Windows GDI+ Information Disclosure Vulnerability...

Information disclosure

Windows GDI+ Information Disclosure Vulnerability...

CVE-2022-41098

Technical details for CVE-2022-41098 (affected product/component/versions/root cause/impact/remediation) are not provided in the connected or initial documents. Monitor for updates from official sources; no public details are included here.

CVE-2022-41098 Windows GDI+ Information Disclosure Vulnerability

...

Microsoft Windows Multiple Vulnerabilities (KB5019964)

This host is missing a critical security update according to Microsoft KB5019964 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Windows GDI+ Information Disclosure Vulnerability

...

PT-2022-5494 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of internal data in the Windows GDI+ interface, which can allow an attacker to gain unauthorized access to protected information using a...