EUVD-2026-22487

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...

PT-2026-32792

🪟 CVE-2026-27930 is Microsoft basically rating its own certainty like a Netflix show: “trust us, it’s real.” Patch confidence ≠ patch comfort—GDI bugs love surprises. WindowsSecurity https://t.co/D22PcrqW3J WindowsSecurity PatchManagement GdiInformationDisclosure https://t.co/DAKvm6v2sr...

Microsoft Windows GDI 缓冲区错误漏洞

Microsoft Windows GDI is a core underlying standard interface within the Windows operating system developed by Microsoft, responsible for drawing graphical objects on the screen or printer, managing fonts, and processing images. There is a buffer error vulnerability present in Microsoft Windows...

CVE-2026-25190

Untrusted search path in Windows GDI allows an unauthorized attacker to execute code locally...

Microsoft Windows GDI Bitmap Parsing Out-Of-Bound Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Windows. Interaction with the GDI library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

PT-2026-24314

Уязвимость компонента Graphics Device Interface GDI операционных систем Windows связана с использованием ненадёжного пути поиска. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...

CVE-2026-20846

Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network...

CVE-2026-20846

Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network...

EUVD-2025-24289

Malicious code in bioql PyPI...

CVE-2025-53766

CVE-2025-53766 is a heap-based buffer overflow in Windows GDI+ that enables a remote attacker to execute code over a network. Public details describe the vulnerability as a memory overflow in GDI+ triggered by processing specially crafted metafiles, potentially allowing arbitrary code execution w...

PT-2025-32850

Name of the Vulnerable Software and Affected Versions: Windows GDI+ affected versions not specified Description: A heap-based buffer overflow exists in Windows GDI+. This allows an unauthorized attacker to execute code over a network. The vulnerability enables remote attackers to execute arbitrar...

Microsoft Windows GDI Security Vulnerability

Microsoft Windows GDI+ is a graphical device interface for the Windows operating system from Microsoft USA. The software is part of the .NET Framework and is responsible for drawing graphical images and displaying information on screens and printers. A security vulnerability exists in Microsoft...

CVE-2022-41098

Windows GDI+ Information Disclosure Vulnerability...

CVE-2022-41098

Windows GDI+ Information Disclosure Vulnerability...

PT-2022-1563 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows GDI component, allowing an attacker to potentially elevate their privileges. This could impact the system, enabling...

CVE-2020-1142

An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory, aka 'Windows GDI Elevation of Privilege Vulnerability'...

CVE-2020-1145

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0963...

CVE-2020-0881

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0883...

CVE-2020-0883

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0881...

CVE-2020-0874

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0774...