CVE-2026-25181

Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network...

EUVD-2026-10653

Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network...

EUVD-2026-10654

Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network...

CVE-2026-25181

Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network...

CVE-2026-25181

Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network...

CVE-2026-25181 GDI+ Information Disclosure Vulnerability

...

CVE-2026-25181

Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network...

CVE-2026-25181 GDI+ Information Disclosure Vulnerability

...

CVE-2026-25181

CVE-2026-25181 is a Windows GDI+ out-of-bounds read vulnerability that allows an attacker to disclose information over the network. The CVE is referenced across NVD/NCSC/EUVD and is documented as a read past bounds in Windows GDI+. Impact described as high confidentiality loss with network-based,...

PT-2026-24308

Name of the Vulnerable Software and Affected Versions Microsoft Windows GDI+ affected versions not specified Description An out-of-bounds read issue exists in Windows GDI+. This can allow an attacker to potentially disclose information over a network. The issue is related to how GDI+ handles bitm...

CVE-2026-20846

CVE-2026-20846 describes a buffer over-read in Windows GDI+ that can be exploited over a network to cause a denial of service. The CVSS v3.1 base score is 7.5 (HIGH). Mitigation requires the Microsoft update per the MSRC vulnerability entry CVE-2026-20846.

Microsoft Windows GDI+ 安全漏洞

Microsoft Windows GDI+ is a graphics device interface for the Windows operating system developed by Microsoft Corporation. This software is part of the .NET framework and is responsible for rendering graphical images and displaying information on the screen and printers. There are security...

Patch Tuesday - November 2025

Microsoft is publishing 66 new vulnerabilities today, which is far fewer than we’ve come to expect in recent months. There’s a lone exploited-in-the-wild zero-day vulnerability, which Microsoft assesses as critical severity, although there’s apparently no public disclosure yet. Three critical...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service - Execution of arbitrary code root/admin privileges - Accessing sensitive data - Obtaining elevated...

CVE-2025-60724 GDI+ Remote Code Execution Vulnerability

...

CVE-2025-60724 GDI+ Remote Code Execution Vulnerability

...

CVE-2025-60724

Technical details about CVE-2025-60724 are not provided in the supplied documents. Connected KBs discuss OS updates and security fixes but do not specify vulnerable product versions, root cause, exploitation, or patch specifics for this CVE. Monitor for updates.

EUVD-2022-35419

Malicious code in bioql PyPI...

CVE-2025-53766

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network...

CVE-2025-53766

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network...