Update now! February's Patch Tuesday tackles three zero-days

The Patch Tuesday roundup from Microsoft for February 2023 includes three zero-days. Not exactly what we had in mind for Valentine's Day. Microsoft classifies a vulnerability as a zero-day if it is publicly disclosed or actively exploited with no official fix available. As far as we can tell, onl...

CVE-2023-21823

Windows Graphics Component Remote Code Execution Vulnerability...

CVE-2023-21823

Windows Graphics Component Remote Code Execution Vulnerability...

CVE-2023-21822

Windows Graphics Component Elevation of Privilege Vulnerability...

CVE-2023-21804

Windows Graphics Component Elevation of Privilege Vulnerability...

CVE-2023-21804

Windows Graphics Component Elevation of Privilege Vulnerability...

CVE-2023-21804

Windows Graphics Component Elevation of Privilege Vulnerability...

Privilege escalation

Windows Graphics Component Elevation of Privilege Vulnerability...

Privilege escalation

Windows Graphics Component Elevation of Privilege Vulnerability...

CVE-2023-21822 Windows Graphics Component Elevation of Privilege Vulnerability

...

CVE-2023-21822 Windows Graphics Component Elevation of Privilege Vulnerability

...

CVE-2023-21823: Integer Overflow or Wraparound

Windows Graphics Component Remote Code Execution Vulnerability...

CVE-2023-21822: Use After Free

Windows Graphics Component Elevation of Privilege Vulnerability...

CVE-2023-21804: Heap-based Buffer Overflow

Windows Graphics Component Elevation of Privilege Vulnerability...

PT-2023-1386

Name of the Vulnerable Software and Affected Versions Windows Graphics Component affected versions not specified Description The issue is related to a buffer overflow in the Windows Graphics Component, which can allow an attacker to execute arbitrary code. This is an elevation-of-privilege...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. The vulnerabilities allow a malicious person to carry out attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root rights Remote code execution User rights Access to...

PT-2023-1594 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Graphics Component. It is associated with a buffer overflow in memory, which could allow an...

Microsoft Graphics Component security vulnerabilities

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based...

Microsoft Graphics Component security vulnerabilities

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. The following products and versions are affected: Windows Server 2022,Windows Server 2022 Server Core installation,Windows 10 Version 20H2 f...

KLA20233 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in...