1070 matches found
CVE-2025-53807
CVE-2025-53807 describes a race condition in the Microsoft Graphics Component that allows local privilege escalation. The NCSC document confirms CVE-2025-53807 under Windows-related vulnerabilities. The CVSS3.1 vector from the initial document indicates a Local attack vector, High impact on confi...
CVE-2025-53807 Windows Graphics Component Elevation of Privilege Vulnerability
...
CVE-2025-53807 Windows Graphics Component Elevation of Privilege Vulnerability
...
CVE-2025-53800 Windows Graphics Component Elevation of Privilege Vulnerability
...
CVE-2025-53800
CVE-2025-53800 is a local privilege escalation in the Microsoft Graphics Component. The Initial Description notes privilege elevation for an authorized attacker, but does not provide technical details on the vulnerable subcomponent, root cause, affected versions, exploit vectors, or exact impact ...
CVE-2025-55228 Windows Graphics Component Remote Code Execution Vulnerability
...
CVE-2025-54919
CVE-2025-54919 is linked to Windows Win32K GRFX and is described as a race condition in a shared resource that could allow an authorized, local attacker to execute code. The Connected documents confirm the CVE within Windows Win32K GRFX but do not provide concrete exploit details, affected versio...
CVE-2025-54919 Windows Graphics Component Remote Code Execution Vulnerability
...
Windows Graphics Component Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to execute code locally...
Windows Graphics Component Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
Windows Graphics Component Elevation of Privilege Vulnerability
No cwe for this issue in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
PT-2025-36889
Name of the Vulnerable Software and Affected Versions: Windows Win32K - GRFX affected versions not specified Description: The issue involves concurrent execution using a shared resource with improper synchronization, specifically a race condition within Windows Win32K - GRFX. This allows an...
Windows Graphics Component Code Execution
The vulnerability of the Windows Graphics Component in Windows operating systems is related to the dereferencing of an unreliable pointer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2025-50161
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
Microsoft Patch Tuesday for August 2025 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for August 2025, which includes 111 vulnerabilities affecting a range of products, including 13 that Microsoft marked as "critical". In this month's release, Microsoft observed none of the included vulnerabilities being actively exploited in the...
CVE-2025-53132
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
CVE-2025-53132
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
CVE-2025-50161
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
CVE-2025-50161
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
CVE-2025-53766
CVE-2025-53766 is a heap-based buffer overflow in Windows GDI+ that enables a remote attacker to execute code over a network. Public details describe the vulnerability as a memory overflow in GDI+ triggered by processing specially crafted metafiles, potentially allowing arbitrary code execution w...