KB5001339: Windows 10 version 1803 Security Update (April 2021)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Win32k Elevation of Privilege Vulnerability CVE-2021-27072, CVE-2021-28310 - Windows Media Photo Codec Information Disclosure Vulnerability CVE-2021-27079 - Windows Event Tracing Elevati...

KB5001382: Windows 8.1 and Windows Server 2012 R2 Security Update (Apr 2021)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Win32k Elevation of Privilege Vulnerability CVE-2021-27072 - Microsoft Internet Messaging API Remote Code Execution Vulnerability CVE-2021-27089 - RPC Endpoint Mapper Service Elevation o...

KB5001387: Windows Server 2012 Security Update (Apr 2021)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Win32k Elevation of Privilege Vulnerability CVE-2021-27072 - Microsoft Internet Messaging API Remote Code Execution Vulnerability CVE-2021-27089 - RPC Endpoint Mapper Service Elevation o...

The vulnerability of the gdi_SelectObject component in the FreeRDP remote desktop protocol allows a attacker to compromise data integrity.

The vulnerability of the gdiSelectObject component in the FreeRDP remote desktop protocol implementation is related to the lack of a mechanism for data type conversion. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

The vulnerability of the Windows GDI+ component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows GDI+ component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow an attacker, acting remotely, to gain unauthorized access to protected information...

VulnCheck KEV: CVE-2018-8596

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019,...

VulnCheck KEV: CVE-2018-8595

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019,...

Microsoft Issues Patches for Defender Zero-Day and 82 Other Windows Flaws

For the first patch Tuesday of 2021, Microsoft released security updates addressing a total of 83 flaws spanning as many as 11 products and services, including an actively exploited zero-day vulnerability. The latest security patches cover Microsoft Windows, Edge browser, ChakraCore, Office and...

CVE-2021-1708

Windows GDI+ Information Disclosure Vulnerability...

CVE-2021-1708

Windows GDI+ Information Disclosure Vulnerability...

CVE-2021-1665

GDI+ Remote Code Execution Vulnerability...

CVE-2021-1665

GDI+ Remote Code Execution Vulnerability...

Remote code execution

GDI+ Remote Code Execution Vulnerability...

Information disclosure

Windows GDI+ Information Disclosure Vulnerability...

CVE-2021-1708 Windows GDI+ Information Disclosure Vulnerability

...

CVE-2021-1708

Technical details for CVE-2021-1708 are not provided in the supplied documents. Monitor for updates; no affected products, impact, or remediation details can be confirmed from the available sources.

CVE-2021-1665

Technical details for CVE-2021-1665 are not provided in the connected documents. The provided sources reference multiple CVEs and general vulnerability contexts but do not disclose affected products, root cause, impact, or remediation for this specific CVE. Monitor for updates.

CVE-2021-1665 GDI+ Remote Code Execution Vulnerability

...

GDI+ Remote Code Execution Vulnerability

...

KLA12041 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges, spoof user interface, bypass security restrictions, cause denial of service. Below is a...