19861 matches found
CVE-2026-30974
The copyparty advisory GHSA-M6HV-X64C-27MM describes a vulnerability where the nohtml volflag failed to block JavaScript in SVG files. Although not a vulnerability by itself, this allowed a user with write access to upload an SVG containing embedded JavaScript that could execute when opened, pote...
CVE-2026-25190
Untrusted search path in Windows GDI allows an unauthorized attacker to execute code locally...
CVE-2026-25190 Windows GDI Remote Code Execution Vulnerability
...
CVE-2026-25190
CVE-2026-25190 is a Windows GDI vulnerability (Untrusted search path) that enables local code execution. The CVE is documented across NVD/NCSC/EUVD with a base CVSS v3.1 score of 7.8 (High) and a local attack vector requiring user interaction. Microsoft has released fixes via March 2026 updates (...
CVE-2026-25190 Windows GDI Remote Code Execution Vulnerability
...
CVE-2026-25180
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally...
CVE-2026-25180
CVE-2026-25180 describes an out-of-bounds read in the Microsoft Graphics Component that can allow an unauthorized local attacker to disclose information. Connected sources (NVD, CVE listing, ENISA/NCSC advisories) confirm the affected component as Microsoft Graphics Component and the impact as lo...
CVE-2026-25180 Windows Graphics Component Information Disclosure Vulnerability
...
CVE-2026-25180 Windows Graphics Component Information Disclosure Vulnerability
...
CVE-2026-25169
Divide by zero in Microsoft Graphics Component allows an unauthorized attacker to deny service locally...
CVE-2026-25169 Windows Graphics Component Denial of Service Vulnerability
...
CVE-2026-25169 Windows Graphics Component Denial of Service Vulnerability
...
CVE-2026-25169
Technical details about CVE-2026-25169 are not provided in the supplied documents. No affected products, vulnerable components, impact, or remediation are specified here. Monitor for updates.
CVE-2026-25168 Windows Graphics Component Denial of Service Vulnerability
...
CVE-2026-25168
CVE-2026-25168 is a Windows Graphics Component denial-of-service vulnerability. Exploitation requires local access with low complexity and no user interaction, and can cause an availability impact flagged as HIGH. The CVSSv3.1 score is 6.2 (MEDIUM overall) with an exploit that is unproven and rem...
CVE-2026-25168
Null pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to deny service locally...
CVE-2026-25168 Windows Graphics Component Denial of Service Vulnerability
...
CVE-2026-23668 Windows Graphics Component Elevation of Privilege Vulnerability
...
CVE-2026-23668
CVE-2026-23668 affects the Windows Graphics Component and is an elevation-of-privilege vulnerability. The advisory indicates a local attack vector with high attack complexity, requiring low privileges and no user interaction (UI: NONE). The vulnerability impacts confidentiality, integrity, and av...