June 10, 2025—KB5060118 (OS Build 25398.1665)

None None...

June 10, 2025—KB5060526 (OS Build 20348.3807)

None None...

Windows Graphics Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

Windows Graphics Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

Windows Graphics Component Remote Code Execution Vulnerability

Integer overflow or wraparound in Microsoft Graphics Component allows an authorized attacker to execute code locally...

CVE-2025-49732: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2025-49744: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

Microsoft Graphics Component 安全漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. An attacker could exploit this vulnerability to gain elevated privileges. The following products and versions are affected: Windows 10 Versi...

Microsoft Graphics Component 安全漏洞

Microsoft Graphics Component is a graphics driver component of Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. An attacker could exploit the vulnerability to elevate privileges...

CVE-2025-49742: Integer Overflow or Wraparound

Integer overflow or wraparound in Microsoft Graphics Component allows an authorized attacker to execute code locally...

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in its ability to copy buffers without checking the size of the input data. This allows attackers to execute arbitrary code.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality lies in the copying of buffers without checking the size of the input data when processing GIF files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Graphics Component 安全漏洞

Microsoft Graphics Component is a graphics driver component of Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. An attacker can exploit this vulnerability to remotely execute code...

PT-2025-28620 · Microsoft · Graphics +1

Name of the Vulnerable Software and Affected Versions: Microsoft Graphics Component affected versions not specified Description: A heap-based buffer overflow issue in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is...

PT-2025-28628 · Microsoft · Graphics +1

Name of the Vulnerable Software and Affected Versions: Microsoft Graphics Component affected versions not specified Description: A heap-based buffer overflow issue in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is...

Microsoft Windows GDI+ 安全漏洞

Microsoft Windows GDI+ is a graphical device interface for the Windows operating system from Microsoft USA. The software is part of the .NET Framework and is responsible for drawing graphical images and displaying information on screens and printers. A security vulnerability exists in Microsoft...

PT-2025-28627 · Microsoft · Graphics +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: An integer overflow or wraparound issue exists in the Microsoft Graphics Component. This allows an authorized attacker to execute code locally. The vulnerability may also allow...

Moderate: Red Hat Security Advisory: Red Hat AI Inference Server 3.0 (CUDA)

Red Hat AI Inference Server 3.0 CUDA is now available. Red Hat® AI Inference Server...

webkitgtk: Use-after-free in WebCore::GraphicsContext leading to information leak and possibly code execution

A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events in WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further memory corruption. A victim must be tricked into visiting a malicious web page to trigger this...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper checks...

chromium-browser: Use after free in ANGLE

There's a flaw in the Angle package where processing maliciously crafted web content may lead to a use-after-free. A remote attacker may leverage that to exploit heap corruption related bugs, such as crashing the application or remote code execution...