BrokenType

BrokenType BrokenType es un conjunto de herramientas diseñadas para probar la robustez y seguridad del software de rasterización de fuentes, especialmente bases de código propensas a problemas de corrupción de memoria escritas en C/C++ y lenguajes similares. Consta de los siguientes componentes:...

CVE-2026-77491

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...

CVE-2026-69288

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...

CVE-2026-68827

Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73422

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...

CVE-2026-69288

CVE-2026-69288 is a use of uninitialized resource vulnerability in Windows GDI+ that allows a locally authenticated attacker with low privileges to disclose information . The attack vector is local , requires no user interaction , and has no impact on integrity or availability , with a high confi...

CVE-2026-68827

CVE-2026-68827 is an integer underflow (wrap or wraparound) vulnerability in Windows GDI+ that allows an authorized attacker to achieve elevation of privileges over a network . The vulnerability is rated HIGH severity (CVSS 8.0) with a vector of AV:N/AC:L/PR:L/UI:R, meaning exploitation requires ...

EUVD-2026-73399

Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...

CVE-2026-77491

CVE-2026-77491 is an out-of-bounds read in Windows GDI that allows an unauthorized local attacker to disclose information. The CVSS 3.1 base score is 5.5 (MEDIUM) with a local attack vector, no privileges required, user interaction required, and high confidentiality impact but no integrity or ava...

EUVD-2026-73263

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...

Windows GDI+ Elevation of Privilege Vulnerability

Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...

CVE-2026-65662

Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally...

CVE-2026-62890

Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally...

CVE-2026-62822

Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network...

CVE-2026-62709

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...

CVE-2026-61360

Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally...

CVE-2026-62822

CVE-2026-62822 describes an integer overflow/wraparound in Windows GDI+ that allows an unauthenticated attacker to execute code remotely over a network. The CVSSv3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a base score of 8.8 ( HIGH ), indicating high impact for confidentiality, integ...

EUVD-2026-56677

Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network...

CVE-2026-62709 Windows GDI+ Information Disclosure Vulnerability

...

CVE-2026-62709

The CVE describes an information-disclosure flaw in Windows GDI+. Affected component: Windows GDI+ (graphics rendering). Root cause: use of an uninitialized resource, enabling an authorized local attacker to disclose information. Impact: confidentiality loss with a CVSS v3.1 base score of 5.5 (Lo...