Privilege escalation

An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory, aka 'Windows GDI Elevation of Privilege Vulnerability'...

CVE-2020-1179

Summary of CVE-2020-1179 (Windows GDI Information Disclosure Vulnerability) : The vulnerability affects the Windows Graphics Device Interface (GDI) component, where memory contents may be improperly disclosed, enabling information exposure on vulnerable systems. Related entries (CVE-2020-0963, CV...

CVE-2020-1179 Windows GDI Information Disclosure Vulnerability

...

CVE-2020-1145

Technical details for CVE-2020-1145 (affected product/version, root cause, exploit information) are not publicly provided in the supplied documents. Monitor for updates and new connected documents that reveal specifics.

CVE-2020-1145 Windows GDI Information Disclosure Vulnerability

...

CVE-2020-1141 Windows GDI Information Disclosure Vulnerability

...

CVE-2020-1142 Windows GDI Elevation of Privilege Vulnerability

...

CVE-2020-1141

Technical details for CVE-2020-1141 are not publicly available in the provided documents. No explicit affected components, root cause, or fixes are stated here. Monitor for updates from official advisories.

CVE-2020-1142

CVE-2020-1142 is a Windows GDI Elevation of Privilege vulnerability in which the Graphics Device Interface mishandles objects in memory, enabling local attackers to run code in kernel mode after logging on. The NVD/MS advisories describe a high-impact, local, privilege-escalation flaw with 7.2/7....

CVE-2020-0963

The CVE-2020-0963 entry describes an information disclosure vulnerability in the Windows Graphics Device Interface (GDI) where memory contents may be exposed. The vulnerability is tied to the GDI component’s handling of objects in memory, enabling disclosure of memory contents by an attacker. The...

CVE-2020-0963 Windows GDI Information Disclosure Vulnerability

...

CVE-2020-11523

libfreerdp/gdi/region.c in FreeRDP versions 1.0 through 2.0.0-rc4 has an Integer Overflow...

DEBIAN-CVE-2020-11522

libfreerdp/gdi/gdi.c in FreeRDP 1.0 through 2.0.0-rc4 has an Out-of-bounds Read...

CVE-2020-11523

libfreerdp/gdi/region.c in FreeRDP versions 1.0 through 2.0.0-rc4 has an Integer Overflow...

UBUNTU-CVE-2020-11522

libfreerdp/gdi/gdi.c in FreeRDP 1.0 through 2.0.0-rc4 has an Out-of-bounds Read...

CVE-2020-11522

libfreerdp/gdi/gdi.c in FreeRDP 1.0 through 2.0.0-rc4 has an Out-of-bounds Read...

Microsoft Windows Graphics Device Interface Information Disclosure Vulnerability (CNVD-2020-33802)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Graphics Device Interface GDI is one of the graphic device interfaces. An...

Microsoft Windows GDI Component Information Disclosure Vulnerability (CNVD-2020-46638)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in the GDI component of Microsoft Windows,...

Windows GDI Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

Windows GDI Information Disclosure Vulnerability

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory, allowing an attacker to retrieve information from a targeted system. By itself, the information disclosure does not allow arbitrary code execution; however, it could...