Lucene search
K

852 matches found

Positive Technologies
Positive Technologies
added 2025/09/09 12:0 a.m.3 views

PT-2025-36889

Name of the Vulnerable Software and Affected Versions: Windows Win32K - GRFX affected versions not specified Description: The issue involves concurrent execution using a shared resource with improper synchronization, specifically a race condition within Windows Win32K - GRFX. This allows an...

7.8CVSS7.1AI score0.00298EPSS
Exploits0References8
RedhatCVE
RedhatCVE
added 2025/08/14 6:24 p.m.6 views

CVE-2025-50161

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7.3CVSS7.7AI score0.00538EPSS
Exploits0References1
Talos Blog
Talos Blog
added 2025/08/12 7:39 p.m.17 views

Microsoft Patch Tuesday for August 2025 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for August 2025, which includes 111 vulnerabilities affecting a range of products, including 13 that Microsoft marked as "critical". In this month's release, Microsoft observed none of the included vulnerabilities being actively exploited in the...

10CVSS9.3AI score0.36074EPSS
Exploits7
OSV
OSV
added 2025/08/12 6:15 p.m.1 views

CVE-2025-53132

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00426EPSS
Exploits0References1
NVD
NVD
added 2025/08/12 6:15 p.m.1 views

CVE-2025-53132

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00426EPSS
Exploits0References1
NVD
NVD
added 2025/08/12 6:15 p.m.2 views

CVE-2025-50161

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7.3CVSS0.00538EPSS
Exploits0References1
OSV
OSV
added 2025/08/12 6:15 p.m.4 views

CVE-2025-50161

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7.3CVSS6AI score0.00538EPSS
Exploits0References1
CVE
CVE
added 2025/08/12 5:10 p.m.72 views

CVE-2025-53766

CVE-2025-53766 is a heap-based buffer overflow in Windows GDI+ that enables a remote attacker to execute code over a network. Public details describe the vulnerability as a memory overflow in GDI+ triggered by processing specially crafted metafiles, potentially allowing arbitrary code execution w...

9.8CVSS8AI score0.06706EPSS
Exploits0References1Affected Software17
Cvelist
Cvelist
added 2025/08/12 5:10 p.m.13 views

CVE-2025-50165 Windows Graphics Component Remote Code Execution Vulnerability

...

9.8CVSS0.03536EPSS
Exploits6References1
Vulnrichment
Vulnrichment
added 2025/08/12 5:10 p.m.1 views

CVE-2025-50165 Windows Graphics Component Remote Code Execution Vulnerability

...

9.8CVSS7.2AI score0.03536EPSS
Exploits6References1
Cvelist
Cvelist
added 2025/08/12 5:9 p.m.11 views

CVE-2025-49743 Windows Graphics Component Elevation of Privilege Vulnerability

...

6.7CVSS0.00429EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/12 5:9 p.m.1 views

CVE-2025-49743 Windows Graphics Component Elevation of Privilege Vulnerability

...

6.7CVSS7.2AI score0.00429EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2025/08/12 7:0 a.m.2 views

Windows Graphics Component Remote Code Execution Vulnerability

Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...

9.8CVSS7.5AI score0.03536EPSS
Exploits6
Microsoft CVE
Microsoft CVE
added 2025/08/12 7:0 a.m.2 views

Windows Graphics Component Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

6.7CVSS7.3AI score0.00429EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/08/12 12:0 a.m.3 views

PT-2025-32850

Name of the Vulnerable Software and Affected Versions: Windows GDI+ affected versions not specified Description: A heap-based buffer overflow exists in Windows GDI+. This allows an unauthorized attacker to execute code over a network. The vulnerability enables remote attackers to execute arbitrar...

10CVSS8.8AI score0.06706EPSS
Exploits0References23
BDU FSTEC
BDU FSTEC
added 2025/07/16 12:0 a.m.7 views

The vulnerability of the Graphics component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Graphics component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS7.4AI score0.00273EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/07/11 12:0 a.m.4 views

The vulnerability of the Graphics component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Graphics component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7CVSS5.8AI score0.0071EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2025/07/11 12:0 a.m.6 views

The vulnerability of the Graphics component of Windows operating systems, which allows a hacker to execute arbitrary code

The vulnerability of the Graphics component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00273EPSS
Exploits0References2
OSV
OSV
added 2025/07/08 5:16 p.m.3 views

CVE-2025-49727

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7CVSS6AI score0.00348EPSS
Exploits0References1
OSV
OSV
added 2025/07/08 5:15 p.m.0 views

CVE-2025-47984

Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network...

7.5CVSS5.8AI score0.14294EPSS
Exploits0References1
Rows per page
Query Builder