2234 matches found
CVE-2016-0040
CVE-2016-0040 Este exploit se basa en el proyecto de 32 bits de SMMRootkit https://github.com/Rootkitsmm/cve-2016-0040, que hace que esta vulnerabilidad provoque un BSoD con todas las 'a' en RCX y las 'B' en RAX. Se portó a Windows 7 SP1 de 64 bits y no utiliza la instrucción "mov rcx+06h, rax"...
BrokenType
BrokenType BrokenType is a set of tools designed to test the robustness and security of font rasterization software, especially codebases prone to memory corruption issues written in C/C++ and similar languages. It consists of the following components: TrueType program generator - a Python script...
CVE-2026-77491
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...
CVE-2026-69288
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...
CVE-2026-68827
Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73422
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...
CVE-2026-69288
CVE-2026-69288 is a use of uninitialized resource vulnerability in Windows GDI+ that allows a locally authenticated attacker with low privileges to disclose information . The attack vector is local , requires no user interaction , and has no impact on integrity or availability , with a high confi...
CVE-2026-68827
CVE-2026-68827 is an integer underflow (wrap or wraparound) vulnerability in Windows GDI+ that allows an authorized attacker to achieve elevation of privileges over a network . The vulnerability is rated HIGH severity (CVSS 8.0) with a vector of AV:N/AC:L/PR:L/UI:R, meaning exploitation requires ...
EUVD-2026-73399
Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...
CVE-2026-77491
CVE-2026-77491 is an out-of-bounds read in Windows GDI that allows an unauthorized local attacker to disclose information. The CVSS 3.1 base score is 5.5 (MEDIUM) with a local attack vector, no privileges required, user interaction required, and high confidentiality impact but no integrity or ava...
EUVD-2026-73263
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...
Windows GDI+ Elevation of Privilege Vulnerability
Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...
Astra Linux – Vulnerability in freerdp2
FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The affected versions are subject to an IntegerOverflow issue, which leads to an Out-of-Bound Write Vulnerability in the gdiCreateSurface function. This issue only affects FreeRDP-based clients...
Astra Linux – Vulnerability in freerdp2
FreeRDP is a free implementation of the Remote Desktop Protocol. Clients that use /bpp:32 and the legacy GDI drawing path, along with versions of FreeRDP prior to 3.5.0 or 2.11.6, are vulnerable to out-of-bounds read vulnerabilities. Versions 3.5.0 and 2.11.6 address this issue. As a workaround,...
Astra Linux – Vulnerability in freerdp2
FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions, a malicious server may trigger out-of-bound writes in a connected client. Connections that use GDI or SurfaceCommands to send graphics updates to the client may send...
CVE-2026-65662
Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally...
CVE-2026-62890
Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally...
CVE-2026-62822
Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network...