CVE-2026-21235 Windows Graphics Component Elevation of Privilege Vulnerability

...

CVE-2026-21235 Windows Graphics Component Elevation of Privilege Vulnerability

...

CVE-2026-21235

CVE-2026-21235 describes a use-after-free vulnerability in Microsoft Graphics Component that can allow an authorized attacker to elevate privileges locally. Reported CVSS v3.1Base score 7.3 (HIGH) with LOCAL attack vector, low attack complexity, requiring user interaction and low privileges. Impa...

CVE-2026-21235

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2026-21246

CVE-2026-21246 is a heap-based buffer overflow in the Microsoft Graphics Component that enables local privilege escalation for an authorized attacker. The CVSS 3.1 vector (LOCAL, LOW complexity, LOW privileges, NONE user interaction) yields a base score of 7.8 (HIGH impact on confidentiality, int...

CVE-2026-21246 Windows Graphics Component Elevation of Privilege Vulnerability

...

CVE-2026-21246

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2026-21246 Windows Graphics Component Elevation of Privilege Vulnerability

...

Windows Graphics Component Elevation of Privilege Vulnerability

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

Windows Graphics Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

PT-2026-7339

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A flaw exists in the Microsoft Graphics Component that could allow an attacker to gain higher-level permissions on a system. This issue involves a use-after-free conditio...

Microsoft Graphics Component 安全漏洞

The Microsoft Graphics Component is a graphics driver component developed by Microsoft Corporation. There are security vulnerabilities present in the Microsoft Graphics Component. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and versions are...

Microsoft Graphics Component 资源管理错误漏洞

The Microsoft Graphics Component is a graphics driver component developed by Microsoft Corporation. There is a resource management vulnerability associated with the Microsoft Graphics Component. The following products and versions are affected: Windows 10 Version 1809 for 32-bit systems, Windows ...

KLA90878 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, bypass security restrictions, spoof user interface, obtain sensitive information, cause denial of service. Below is a...

KB5075971: Windows Server 2012 Security Update (February 2026)

The remote Windows host is missing security update 5075971. It is, therefore, affected by multiple vulnerabilities - Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-21513 - Heap-based buffer overflow in Microso...

PT-2026-7350

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A heap-based buffer overflow exists in the Microsoft Graphics Component. This issue allows a local attacker to gain elevated privileges on the system. The vulnerability...

CVE-2026-21235: Use After Free

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2026-21246: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

KB5075970: Windows Server 2012 R2 Security Update (February 2026)

The remote Windows host is missing security update 5075970. It is, therefore, affected by multiple vulnerabilities - Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-21513 - Heap-based buffer overflow in Microso...

firefox: thunderbird: Sandbox escape due to integer overflow in the Graphics component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to integer overflow in the Graphics component...