2633 matches found
CVE-2016-0040
CVE-2016-0040 This exploit builds upon SMMRootkit's 32Bit project https://github.com/Rootkitsmm/cve-2016-0040 which causes this vulnerability to trigger a BSoD with all 'a's in RCX and 'B's in RAX. It was ported to 64Bit Windows 7 SP1 and doesn't use the "mov rcx+06h, rax" instruction for inital...
CVE-2026-94527
Heap-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally...
CVE-2026-108424
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network...
CVE-2026-108407
Out-of-bounds read in Windows GDI allows an authorized attacker to elevate privileges locally...
EUVD-2026-122064
Out-of-bounds read in Windows GDI allows an authorized attacker to elevate privileges locally...
CVE-2026-108407
An out-of-bounds read vulnerability exists in the Windows GDI component, which could allow an authorized attacker to achieve local privilege escalation . The impact of this vulnerability is rated as HIGH , affecting confidentiality, integrity, and availability. Remediation is provided via officia...
EUVD-2026-121616
Heap-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally...
CVE-2026-94527
CVE-2026-94527 identifies a heap-based buffer overflow and integer overflow/wraparound (CWE-122, CWE-190) in Windows GDI . This vulnerability allows an authorized attacker to achieve local privilege elevation . While the provided documents confirm the existence of the vulnerability and the fact t...
EUVD-2026-121724
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network...
CVE-2026-108424
A vulnerability exists in Windows GDI involving an out-of-bounds read , which could allow an unauthorized attacker to disclose information over a network. The vulnerability is associated with CVE-2026-108424 and is addressed in the official security updates for various Windows versions, including...
Windows GDI Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally...
Windows GDI Elevation of Privilege Vulnerability
Out-of-bounds read in Windows GDI allows an authorized attacker to elevate privileges locally...
Windows GDI Information Disclosure Vulnerability
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network...
PT-2026-143395
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network...
PT-2026-144189
Heap-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally...
PT-2026-143380
Out-of-bounds read in Windows GDI allows an authorized attacker to elevate privileges locally...
BrokenType
BrokenType BrokenType is a set of tools designed to test the robustness and security of font rasterization software, especially codebases prone to memory corruption issues written in C/C++ and similar languages. It consists of the following components: TrueType program generator - a Python script...
PT-2026-141217
FreeRDP before 3.33.0 contains a heap use-after-free vulnerability in update gdi patblt, update gdi polygon cb and update gdi mem3blt that retain stale brush cache pointers. A malicious RDP server can resend CACHE BRUSH to the same slot then send PATBLT, causing clients to read freed heap memory,...
PT-2026-137002
FreeRDP before 3.32.2 does not check the product of surface dimensions in gdi CreateSurface when handling an RDPGFX CREATE SURFACE PDU, causing an integer wrap and heap buffer overflow on 32-bit builds and an approximately 4 GiB allocation on 64-bit builds. A malicious RDP server can send a CREAT...
PT-2026-136159
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.32.2 Description A NULL pointer dereference occurs when a malicious RDP server sends a zero-width RDPGFX ResetGraphics PDU. This causes a failed resize in the gdi resize ex function, which leaves the primary display...