20011 matches found
CVE-2025-55698 DirectX Graphics Kernel Denial of Service Vulnerability
...
CVE-2025-55698
CVE-2025-55698 is a denial-of-service vulnerability in the Windows DirectX Graphics Kernel caused by a null pointer dereference. The issue affects Windows DirectX Runtime/Graphics Kernel components and can be triggered remotely to deny service on the affected system. Microsoft references this as ...
CVE-2025-55678
CVE-2025-55678 : A use-after-free in Windows DirectX enables an authenticated local attacker to achieve elevated privileges. The connected EUVD entry confirms this description. No concrete affected builds, exploit details, or patch/version information are provided in the supplied documents. Remed...
CVE-2025-55678 DirectX Graphics Kernel Elevation of Privilege Vulnerability
...
CVE-2025-55678 DirectX Graphics Kernel Elevation of Privilege Vulnerability
...
CVE-2025-49708 Microsoft Graphics Component Elevation of Privilege Vulnerability
...
CVE-2025-49708
CVE-2025-49708: A use-after-free vulnerability in the Microsoft Graphics Component can allow an authorized attacker to elevate privileges over the network. Connected Microsoft security updates and advisories indicate this issue is addressed in October 2025 Windows updates (KBs referenced in KB506...
CVE-2025-49708 Microsoft Graphics Component Elevation of Privilege Vulnerability
...
CVE-2025-59195 Windows Graphics Component Denial of Service Vulnerability
...
CVE-2025-59195 Windows Graphics Component Denial of Service Vulnerability
...
CVE-2025-59195
CVE-2025-59195 describes a race condition in the Microsoft Graphics Component caused by concurrent execution on a shared resource, enabling an authorized attacker to cause a local Denial of Service. The connected documents confirm the vulnerability in the Graphics Component and note that updates ...
NVIDIA GPU Display Driver - October 2025 - Lenovo Support US
No description provided...
CVE-2025-59428 EspoCRM allows arbitrary user creation via stored SVG injection and CSRF
EspoCRM is an open source customer relationship management application. In versions before 9.1.9, a vulnerability allows arbitrary user creation, including administrative accounts, through a combination of stored SVG injection and lack of CSRF protection. An attacker with Knowledge Base edit...
CVE-2025-59428 EspoCRM allows arbitrary user creation via stored SVG injection and CSRF
EspoCRM is an open source customer relationship management application. In versions before 9.1.9, a vulnerability allows arbitrary user creation, including administrative accounts, through a combination of stored SVG injection and lack of CSRF protection. An attacker with Knowledge Base edit...
CVE-2025-59428 EspoCRM allows arbitrary user creation via stored SVG injection and CSRF
EspoCRM is an open source customer relationship management application. In versions before 9.1.9, a vulnerability allows arbitrary user creation, including administrative accounts, through a combination of stored SVG injection and lack of CSRF protection. An attacker with Knowledge Base edit...
Windows Graphics Component Elevation of Privilege Vulnerability
Time-of-check time-of-use toctou race condition in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
Windows Graphics Component Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
Microsoft Graphics Component Elevation of Privilege Vulnerability
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network...
Windows Graphics Component Denial of Service Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to deny service locally...