CVE-2016-0040

CVE-2016-0040 This exploit builds upon SMMRootkit's 32Bit project https://github.com/Rootkitsmm/cve-2016-0040 which causes this vulnerability to trigger a BSoD with all 'a's in RCX and 'B's in RAX. It was ported to 64Bit Windows 7 SP1 and doesn't use the "mov rcx+06h, rax" instruction for inital...

BrokenType

BrokenType BrokenType is a set of tools designed to test the robustness and security of font rasterization software, especially codebases prone to memory corruption issues written in C/C++ and similar languages. It consists of the following components: TrueType program generator - a Python script...

CVE-2026-77491

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...

CVE-2026-69288

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...

CVE-2026-68827

Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73422

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...

CVE-2026-69288

CVE-2026-69288 is a use of uninitialized resource vulnerability in Windows GDI+ that allows a locally authenticated attacker with low privileges to disclose information . The attack vector is local , requires no user interaction , and has no impact on integrity or availability , with a high confi...

CVE-2026-68827

CVE-2026-68827 is an integer underflow (wrap or wraparound) vulnerability in Windows GDI+ that allows an authorized attacker to achieve elevation of privileges over a network . The vulnerability is rated HIGH severity (CVSS 8.0) with a vector of AV:N/AC:L/PR:L/UI:R, meaning exploitation requires ...

EUVD-2026-73399

Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...

CVE-2026-77491

CVE-2026-77491 is an out-of-bounds read in Windows GDI that allows an unauthorized local attacker to disclose information. The CVSS 3.1 base score is 5.5 (MEDIUM) with a local attack vector, no privileges required, user interaction required, and high confidentiality impact but no integrity or ava...

EUVD-2026-73263

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...

Windows GDI+ Elevation of Privilege Vulnerability

Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...

Astra Linux – Vulnerability in freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The affected versions are subject to an IntegerOverflow issue, which leads to an Out-of-Bound Write Vulnerability in the gdiCreateSurface function. This issue only affects FreeRDP-based clients...

CVE-2026-65662

Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally...

CVE-2026-62890

Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally...

CVE-2026-62822

Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network...

CVE-2026-62709

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...

CVE-2026-61360

Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally...

CVE-2026-62822 Windows GDI+ Remote Code Execution Vulnerability

...

CVE-2026-62822

CVE-2026-62822 describes an integer overflow/wraparound in Windows GDI+ that allows an unauthenticated attacker to execute code remotely over a network. The CVSSv3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a base score of 8.8 ( HIGH ), indicating high impact for confidentiality, integ...