Lucene search
K

852 matches found

Microsoft CVE
Microsoft CVE
added 2026/05/12 2:0 p.m.10 views

Win32k Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00304EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2026/05/12 2:0 p.m.12 views

Win32k Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7CVSS5.9AI score0.0019EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.8 views

PT-2026-40182

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A heap-based buffer overflow in the Windows GDI Graphics Device Interface, which is the graphics subsystem of Windows, allows an unauthorized attacker to execute arbitrary code. This issue ca...

7.8CVSS6.4AI score0.00532EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.9 views

PT-2026-40217

Name of the Vulnerable Software and Affected Versions Windows Win32K - GRFX affected versions not specified Description A heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally. This issue can potentially be used to escape a virtual machine...

8.8CVSS6.2AI score0.00427EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.7 views

PT-2026-40150

Name of the Vulnerable Software and Affected Versions Windows Win32K - GRFX affected versions not specified Description An integer overflow or wraparound in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally to SYSTEM level. Recommendations At the moment, there is n...

7.8CVSS5.9AI score0.00304EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.9 views

PT-2026-40165

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00261EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.9 views

PT-2026-40146

Name of the Vulnerable Software and Affected Versions Windows Win32K - GRFX affected versions not specified Description A race condition occurs in Windows Win32K - GRFX due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally t...

7CVSS5.8AI score0.0019EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2026/05/12 12:0 a.m.9 views

KB5087539: Windows Server 2025 Security Update (May 2026)

The remote Windows host is missing security update 5087539 or hotpatch 5087423. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network. CVE-2026-41096 - Stack-based buffer overflow...

9.8CVSS6.9AI score0.72253EPSS
Exploits39References66
EUVD
EUVD
added 2026/04/14 6:30 p.m.2 views

EUVD-2026-22629

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7CVSS5.9AI score0.00207EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/14 6:30 p.m.2 views

EUVD-2026-22487

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00489EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/14 6:30 p.m.2 views

EUVD-2026-22486

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00384EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/14 4:58 p.m.1 views

CVE-2026-33104

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7CVSS5.9AI score0.00207EPSS
Exploits0References2Affected Software21
CVE
CVE
added 2026/04/14 4:57 p.m.18 views

CVE-2026-32221

CVE-2026-32221 is a heap-based buffer overflow in Microsoft Graphics Component that allows an attacker to execute code locally. Public sources (NVD, MSRC, and related advisories) confirm this Windows graphics component vulnerability and note that Microsoft has released updates to fix it (e.g., KB...

8.4CVSS6.2AI score0.00292EPSS
Exploits0References1Affected Software4
Vulnrichment
Vulnrichment
added 2026/04/14 4:57 p.m.2 views

CVE-2026-32221 Windows Graphics Component Remote Code Execution Vulnerability

...

8.4CVSS6.2AI score0.00292EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/14 4:57 p.m.21 views

CVE-2026-32221 Windows Graphics Component Remote Code Execution Vulnerability

...

8.4CVSS0.00292EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2026/04/14 2:0 p.m.3 views

Win32k Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7CVSS5.9AI score0.00207EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2026/04/14 2:0 p.m.3 views

Windows Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally...

8.4CVSS6.6AI score0.00292EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.5 views

PT-2026-32793

Name of the Vulnerable Software and Affected Versions Windows GDI affected versions not specified Description An out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds read occurs when a program reads dat...

5.5CVSS6.1AI score0.00489EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/04/14 12:0 a.m.7 views

Microsoft Windows GDI 缓冲区错误漏洞

Microsoft Windows GDI is a core underlying standard interface within the Windows operating system developed by Microsoft, responsible for drawing graphical objects on the screen or printer, managing fonts, and processing images. There is a buffer error vulnerability present in Microsoft Windows...

5.5CVSS6AI score0.00384EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.4 views

PT-2026-32877

CVE-2026-33104 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to elevate privileg… https://t.co/UuLyDyKlAd...

7CVSS6.4AI score0.00207EPSS
Exploits0References3
Rows per page
Query Builder