PT-2025-36892

Name of the Vulnerable Software and Affected Versions: Graphics Kernel affected versions not specified Description: A time-of-check time-of-use toctou race condition exists in the Graphics Kernel. This condition allows a local attacker with authorization to execute code. The vulnerability also...

Microsoft Graphics Kernel 竞争条件问题漏洞

Microsoft Graphics Kernel is a kernel-mode graphics driver subsystem from Microsoft Corporation USA. A competitive condition issue vulnerability exists in Microsoft Graphics Kernel. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...

KLA87444 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation...

PT-2025-36887

Name of the Vulnerable Software and Affected Versions: Graphics Kernel affected versions not specified Description: A race condition exists due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to execute code locally. The...

PT-2025-36889

Name of the Vulnerable Software and Affected Versions: Windows Win32K - GRFX affected versions not specified Description: The issue involves concurrent execution using a shared resource with improper synchronization, specifically a race condition within Windows Win32K - GRFX. This allows an...

Microsoft Graphics Kernel 资源管理错误漏洞

Microsoft Graphics Kernel is a kernel-mode graphics driver subsystem from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Graphics Kernel. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are...

May 13, 2025—KB5058385 (OS Build 20348.3692)

May 13, 2025—KB5058385 OS Build 20348.3692 For information about Windows update terminology, see types of Windows updates and the monthly quality update types. To find an overview of Windows Server 2022, see its update history page. Be sure to follow @WindowsUpdate to find out when new content is...

Oracle Linux 8 : kernel (ELSA-2025-13960)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-13960 advisory. - i2c/designware: Fix an initialization issue CKI Backport Bot RHEL-106617 CVE-2025-38380 - Bluetooth: hcicore: Fix use-after-free in vhciflush David...

CVE-2025-50161

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

CVE-2025-50176

Access of resource using incompatible type 'type confusion' in Graphics Kernel allows an authorized attacker to execute code locally...

Microsoft Patch Tuesday for August 2025 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for August 2025, which includes 111 vulnerabilities affecting a range of products, including 13 that Microsoft marked as "critical". In this month's release, Microsoft observed none of the included vulnerabilities being actively exploited in the...

CVE-2025-50176

Access of resource using incompatible type 'type confusion' in Graphics Kernel allows an authorized attacker to execute code locally...

CVE-2025-53132

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

CVE-2025-50176

Access of resource using incompatible type 'type confusion' in Graphics Kernel allows an authorized attacker to execute code locally...

CVE-2025-53135 DirectX Graphics Kernel Elevation of Privilege Vulnerability

...

CVE-2025-53135 DirectX Graphics Kernel Elevation of Privilege Vulnerability

...

CVE-2025-50176 DirectX Graphics Kernel Remote Code Execution Vulnerability

...

CVE-2025-50176 DirectX Graphics Kernel Remote Code Execution Vulnerability

...

CVE-2025-50176

CVE-2025-50176 is a Windows graphics kernel RCE due to a type confusion in the DirectX/Graphics Kernel. Affected: core graphics components in Windows. Impact: local code execution with high confidentiality/integrity/availability risk (CVSS 3.1, 7.8). Public details in connected docs show Windows ...

CVE-2025-50172 DirectX Graphics Kernel Denial of Service Vulnerability

...