20640 matches found
CVE-2025-50165
Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
CVE-2025-50161
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
CVE-2025-50161
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
CVE-2025-49743
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2025-49743
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
Cross-site Scripting (XSS)
Overview enshrined/svg-sanitize is a SVG sanitizer for PHP Affected versions of this package are vulnerable to Cross-site Scripting XSS via the cleanXlinkHrefs function, which only searches for lower-case attribute names e.g. xlink:href instead of xlink:HrEf and allows to by-pass the...
CVE-2025-27717
Uncontrolled search path for some IntelR Graphics Driver software may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-24835
Protection mechanism failure in the IntelR Graphics Driver for the IntelR ArcTM B-Series graphics before version 32.0.101.6737 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2025-24515
NULL pointer dereference for some IntelR Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access...
CVE-2025-20023
Incorrect default permissions for some IntelR Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access...
AMD Graphics Vulnerabilities - August 2025 - Lenovo Support US
No description provided...
CVE-2025-53766 GDI+ Remote Code Execution Vulnerability
...
CVE-2025-53766 GDI+ Remote Code Execution Vulnerability
...
CVE-2025-53766
CVE-2025-53766 is a heap-based buffer overflow in Windows GDI+ that enables a remote attacker to execute code over a network. Public details describe the vulnerability as a memory overflow in GDI+ triggered by processing specially crafted metafiles, potentially allowing arbitrary code execution w...
CVE-2025-53135 DirectX Graphics Kernel Elevation of Privilege Vulnerability
...
CVE-2025-53135 DirectX Graphics Kernel Elevation of Privilege Vulnerability
...
CVE-2025-53132
Technical details for CVE-2025-53132 (Windows Win32K GRFX race condition privilege escalation) are not provided in the connected documents. Public specifics (affected versions, exploit details, or fixes) are not available here; monitor for updates from official advisories.
CVE-2025-50176
CVE-2025-50176 is a Windows graphics kernel RCE due to a type confusion in the DirectX/Graphics Kernel. Affected: core graphics components in Windows. Impact: local code execution with high confidentiality/integrity/availability risk (CVSS 3.1, 7.8). Public details in connected docs show Windows ...