Lucene search
K

463 matches found

CNNVD
CNNVD
added 2021/01/12 12:0 a.m.3 views

Microsoft Windows GDI+ Information Disclosure Vulnerability

Microsoft Windows GDI+ is a graphical device interface for the Windows operating system from Microsoft USA. The software is part of the .NET Framework and is responsible for drawing graphical images and displaying information on screens and printers. An information disclosure vulnerability exists...

5.7CVSS6.6AI score0.03441EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2021/01/12 12:0 a.m.1 views

PT-2021-1544 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue exists due to insufficient input validation in the Windows GDI component, allowing a remote attacker to execute arbitrary code. This can enable the attacker to impact the system...

10CVSS7.3AI score0.03632EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2020/12/08 12:0 a.m.1 views

PT-2020-5254 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in the code of the Windows GDI+ component, which can allow an attacker to disclose protected information. It enables attackers to obtain sensitive information...

5.5CVSS5.1AI score0.01291EPSS
Exploits0References8
BDU FSTEC
BDU FSTEC
added 2020/11/24 12:0 a.m.2 views

The vulnerability of the Windows GDI+ component in Windows operating systems allows attackers to execute arbitrary code.

The vulnerability of the Windows GDI+ component in Windows operating systems is related to errors in code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.0096EPSS
Exploits0References3
OSV
OSV
added 2020/11/11 7:15 a.m.0 views

CVE-2020-17068

Windows GDI+ Remote Code Execution Vulnerability...

7.8CVSS7.2AI score0.0096EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2020/11/10 12:0 a.m.2 views

PT-2020-4777 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in code generation management in the Windows GDI+ component, which can be exploited by remote attackers to execute arbitrary code and affect the system...

7.8CVSS7.6AI score0.0096EPSS
Exploits0References7
BDU FSTEC
BDU FSTEC
added 2020/10/20 12:0 a.m.4 views

The vulnerability of the GDI+ component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Graphics Device Interface Plus GDI+ component in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

10CVSS8AI score0.04092EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/10/20 12:0 a.m.3 views

The vulnerability of the Windows Graphics Device Interface Plus (GDI+) component in Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Windows Graphics Device Interface Plus GDI+ component in operating systems involves errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

5.5CVSS5.8AI score0.01333EPSS
Exploits0References3
Prion
Prion
added 2020/10/16 11:15 p.m.17 views

Information disclosure

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface Plus GDI+ handles objects in memory, allowing an attacker to retrieve information from a targeted system. By itself, the information disclosure does not allow arbitrary code execution; however, it...

2.1CVSS7AI score0.01333EPSS
Exploits0References1Affected Software5
CNVD
CNVD
added 2020/10/15 12:0 a.m.32 views

Microsoft Windows and Windows Server Information Disclosure Vulnerability (CNVD-2021-71945)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server is a server operating system. Microsoft Windows and Windows Server are vulnerable to an information disclosure vulnerability that stems...

5.5CVSS0.9AI score0.01333EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2020/10/14 12:0 a.m.45 views

Microsoft Windows Multiple Vulnerabilities (KB4580346)

This host is missing a critical security update according to Microsoft KB4580346 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.2AI score0.9603EPSS
Exploits10References3
NCSC
NCSC
added 2020/10/13 12:0 a.m.4 views

Vulnerabilities fixed in Microsoft Windows

Microsoft fixes multiple vulnerabilities in Windows. A malicious party could potentially exploit the vulnerabilities to execute arbitrary code, to obtain elevated privileges, gain access to sensitive data, launch a denial-of-service attack, or to bypass a security measure. The vulnerability with...

9.3CVSS7.5AI score0.13348EPSS
Exploits12
Positive Technologies
Positive Technologies
added 2020/10/13 12:0 a.m.1 views

PT-2020-4272 · Microsoft · Gdi+ +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Device Interface Plus GDI+ affected versions not specified Description: An information disclosure issue exists in the way GDI+ handles objects in memory, allowing an attacker to retrieve information from a targeted system. Th...

5.5CVSS5.6AI score0.01333EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2020/10/13 12:0 a.m.3 views

PT-2020-4270 · Microsoft · Windows Graphics Device Interface +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Device Interface GDI affected versions not specified Description: A remote code execution issue exists in the way the Windows Graphics Device Interface GDI handles objects in memory. This could allow an attacker to take contr...

10CVSS8.8AI score0.04092EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2020/10/13 12:0 a.m.234 views

KB4579311: Windows 10 Version 2004 October 2020 Security Update

The remote Windows host is missing security update 4579311. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and...

9.3CVSS7.9AI score0.13348EPSS
Exploits12References51
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:0 a.m.2 views

The vulnerability of the Windows GDI component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.1CVSS6.7AI score0.0459EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:0 a.m.1 views

The vulnerability of the Windows GDI component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.1CVSS6.7AI score0.04477EPSS
Exploits0References2
NVD
NVD
added 2020/09/11 5:15 p.m.20 views

CVE-2020-1285

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or dele...

9.3CVSS0.03819EPSS
Exploits0References1
OSV
OSV
added 2020/09/11 5:15 p.m.3 views

CVE-2020-1256

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

5.5CVSS6.7AI score0.04601EPSS
Exploits0References1
OSV
OSV
added 2020/09/11 5:15 p.m.0 views

CVE-2020-1285

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or dele...

8.4CVSS6.3AI score0.03819EPSS
Exploits0References1
Rows per page
Query Builder