CVE-2016-0040

CVE-2016-0040 このエクスプロイトは、SMMRootkitの32ビットプロジェクト https://github.com/Rootkitsmm/cve-2016-0040 を基にしており、この脆弱性によりRCXにすべての'a'、RAXにすべての'B'が設定されたBSoDが発生します。 これは64ビットWindows 7 SP1に移植され、初期段階のエクスプロイトには"mov rcx+06h, rax"命令を使用せず、代わりに"mov rdx+8h, rdx命令を使用して、自己参照ポインタをビットマップのpvScan0変数に配置します。...

BrokenType

BrokenType BrokenType は、フォントラスタライズソフトウェアの堅牢性とセキュリティをテストするために設計されたツールセットです。特に、メモリ破損の問題が発生しやすいコードベース C/C++ および類似の言語で書かれたもの を対象としています。以下のコンポーネントで構成されています: TrueType program generator - ランダムだが有効な TrueType プログラム を生成する Python スクリプト。 TTF/OTF mutator - C++ で書かれた半「スマート」なバイナリフォントファイルミューテーター。 TTF/OTF loader...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, deleting offscreen bitmaps caused gdi-drawing to point to freed memory, leading to UAF when related update packets arrived. A malicious server could trigger client-side use after the objects were freed,...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.0, the gdisurfacebits function processed SURFACEBITSCOMMAND messages sent by the RDP server. When these commands were processed using NSCodec, the bmp.width and bmp.height values provided by the server were not...

Astra Linux – Vulnerability in freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The affected versions are subject to an IntegerOverflow issue, which leads to an Out-of-Bound Write Vulnerability in the gdiCreateSurface function. This issue only affects FreeRDP-based clients...

Astra Linux – Vulnerability in freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol. Clients that use the /bpp:32 legacy GDI drawing path with a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read vulnerabilities. Versions 3.5.0 and 2.11.6 address this issue. As a workaround, use modern...

Astra Linux – Vulnerability in freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions, a malicious server may trigger out-of-bound writes in a connected client. Connections that use GDI or SurfaceCommands to send graphics updates to the client may send...

CVE-2026-77491

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...

CVE-2026-69288

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...

CVE-2026-68827

Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...

CVE-2026-69288

CVE-2026-69288 is a use of uninitialized resource vulnerability in Windows GDI+ that allows a locally authenticated attacker with low privileges to disclose information . The attack vector is local , requires no user interaction , and has no impact on integrity or availability , with a high confi...

EUVD-2026-73422

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...

CVE-2026-68827

CVE-2026-68827 is an integer underflow (wrap or wraparound) vulnerability in Windows GDI+ that allows an authorized attacker to achieve elevation of privileges over a network . The vulnerability is rated HIGH severity (CVSS 8.0) with a vector of AV:N/AC:L/PR:L/UI:R, meaning exploitation requires ...

EUVD-2026-73399

Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...

CVE-2026-77491

CVE-2026-77491 is an out-of-bounds read in Windows GDI that allows an unauthorized local attacker to disclose information. The CVSS 3.1 base score is 5.5 (MEDIUM) with a local attack vector, no privileges required, user interaction required, and high confidentiality impact but no integrity or ava...

EUVD-2026-73263

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...

Windows GDI+ Elevation of Privilege Vulnerability

Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...

Windows GDI Information Disclosure Vulnerability

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...

Windows GDI+ Information Disclosure Vulnerability

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...

CVE-2026-68827: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...