20640 matches found
CVE-2025-50172 DirectX Graphics Kernel Denial of Service Vulnerability
...
CVE-2025-50172 DirectX Graphics Kernel Denial of Service Vulnerability
...
CVE-2025-50165 Windows Graphics Component Remote Code Execution Vulnerability
...
CVE-2025-50165 Windows Graphics Component Remote Code Execution Vulnerability
...
CVE-2025-50165
CVE-2025-50165 targets the Windows/Microsoft Graphics Component through an untrusted pointer dereference in JPEG decoding, enabling remote code execution. Exploitation relies on specially crafted images (e.g., JPEG metadata segments) to trigger code execution without user interaction on affected ...
CVE-2025-50161
CVE-2025-50161 is a heap-based buffer overflow affecting Windows Win32K - GRFX. The vulnerability allows an authorized attacker to achieve local privilege escalation. Exploitation requires user interaction and low privileges before escalation. Microsoft has released security updates addressing vu...
CVE-2025-49743 Windows Graphics Component Elevation of Privilege Vulnerability
...
CVE-2025-49743 Windows Graphics Component Elevation of Privilege Vulnerability
...
CVE-2025-49743
CVE-2025-49743 is a local privilege-escalation vulnerability in the Microsoft Graphics Component caused by a race condition due to improper synchronization when a shared resource is accessed concurrently. The issue affects Windows graphics-related code paths and can let an authorized, local attac...
CVE-2025-27717
Uncontrolled search path for some IntelR Graphics Driver software may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-27717
Uncontrolled search path for some IntelR Graphics Driver software may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-27717
CVE-2025-27717: An uncontrolled search path in some Intel® Graphics Driver software may allow an authenticated user to escalate privileges via local access. The issue is detailed across multiple sources, including Intel’s advisory Intel-SA-01299, which lists affected Intel Graphics Driver compone...
CVE-2025-24835
The CVE-2025-24835 entry concerns Intel Graphics Driver for Intel Arc graphics (including Arc B-Series). The vulnerability is a protection mechanism failure in the Intel Graphics Driver that may allow an authenticated local user to cause a denial of service. Affected software includes Intel Arc B...
CVE-2025-24515
NULL pointer dereference for some IntelR Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access...
CVE-2025-24515
NULL pointer dereference for some IntelR Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access...
CVE-2025-24515
CVE-2025-24515 concerns a NULL pointer dereference in Intel Graphics Drivers that can allow an authenticated local user to cause a denial of service. Affected software includes Intel Graphics Drivers for Arc and Iris Xe graphics, Arc Pro, Data Center GPU Flex, and older Core/Atom/Pentium/Celeron ...
CVE-2025-20023
Incorrect default permissions for some IntelR Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20023
CVE-2025-20023 affects Intel Graphics Driver installers, where incorrect default permissions may allow an authenticated local user to escalate privileges. Affected products include Intel\u00a0Graphics Drivers for Arc, Iris Xe, Pro, Data Center GPU Flex, and related processors; root cause is impro...
CVE-2025-20023
Incorrect default permissions for some IntelR Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-55166 svg-sanitizer By-Passing Attribute Sanitization
savg-sanitizer is a PHP SVG/XML sanitizer. Prior to version 0.22.0, the sanitization logic in the cleanXlinkHrefs method only searches for lower-case attribute name, which allows to by-pass the isHrefSafeValue check. As a result this allows cross-site scripting or linking to external domains. Thi...