570 matches found
Microsoft Windows GDI buffer error vulnerability
Microsoft Windows GDI is a core underlying standard interface in the Windows operating system developed by Microsoft, responsible for drawing graphical objects on the screen or printer, managing fonts, and processing images. There is a buffer error vulnerability present in Microsoft Windows GDI...
PT-2026-32793
Name of the Vulnerable Software and Affected Versions Windows GDI affected versions not specified Description An out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds read occurs when a program reads dat...
Windows GDI+ Disclosure
The vulnerability of the Windows GDI+ interface on Windows operating systems is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
GDI Component Code Execution
The vulnerability of the GDI component in Windows operating systems is related to the use of an insecure lookup path. Exploiting this vulnerability allows an attacker to execute arbitrary code...
EUVD-2026-10665
Untrusted search path in Windows GDI allows an unauthorized attacker to execute code locally...
EUVD-2026-10666
Untrusted search path in Windows GDI allows an unauthorized attacker to execute code locally...
CVE-2026-25190 Windows GDI Remote Code Execution Vulnerability
...
CVE-2026-25190
CVE-2026-25190 is a Windows GDI vulnerability (Untrusted search path) that enables local code execution. The CVE is documented across NVD/NCSC/EUVD with a base CVSS v3.1 score of 7.8 (High) and a local attack vector requiring user interaction. Microsoft has released fixes via March 2026 updates (...
CVE-2026-25190 Windows GDI Remote Code Execution Vulnerability
...
GDI+ Information Disclosure Vulnerability
Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network...
Windows GDI Remote Code Execution Vulnerability
Untrusted search path in Windows GDI allows an unauthorized attacker to execute code locally...
Microsoft Windows GDI+ Buffer Error Vulnerability
Microsoft Windows GDI+ is a graphics device interface for the Windows operating system developed by Microsoft Corporation. This software is part of the .NET framework and is responsible for rendering graphical images and displaying information on the screen and printers. Microsoft Windows GDI+ ha...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005730)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005730 advisory. In the Linux kernel, the following vulnerability has been resolved: ntbnetdev: Use devkfreeskbany in interrupt context TX/RX callback handlers ntbnetdevtxhandler,...
FreeRDP buffer error vulnerability
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that stems from unvalidated target rectangle boundaries in the GDI surface pipeline, which can be exploited by an attacker to cause a heap buffer...
GDI+ DoS
The vulnerability of the GDI+ component in the Windows operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...
CVE-2026-20846 GDI+ Denial of Service Vulnerability
...
CVE-2026-20846
Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network...
CVE-2026-20846 GDI+ Denial of Service Vulnerability
...
GDI+ Denial of Service Vulnerability
Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network...
CVE-2025-67246
A local information disclosure vulnerability exists in the Ludashi driver before 5.1025 due to a lack of access control in the IOCTL handler. This driver exposes a device interface accessible to a normal user and handles attacker-controlled structures containing the lower 4GB of physical addresse...