CVE-2016-0040

CVE-2016-0040 Este exploit se basa en el proyecto de 32 bits de SMMRootkit https://github.com/Rootkitsmm/cve-2016-0040, que hace que esta vulnerabilidad provoque un BSoD con todas las 'a' en RCX y las 'B' en RAX. Se portó a Windows 7 SP1 de 64 bits y no utiliza la instrucción "mov rcx+06h, rax"...

BrokenType

BrokenType BrokenType é um conjunto de ferramentas projetado para testar a robustez e segurança de software de rasterização de fontes, especialmente bases de código propensas a problemas de corrupção de memória escritas em C/C++ e linguagens similares. Consiste nos seguintes componentes: Gerador ...

Astra Linux – Vulnerability in freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The affected versions are subject to an IntegerOverflow issue, which leads to an Out-of-Bound Write Vulnerability in the gdiCreateSurface function. This issue only affects FreeRDP-based clients...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, deleting offscreen bitmaps caused gdi-drawing to point to freed memory, leading to UAF when related update packets arrived. A malicious server could trigger client-side operations after objects were freed,...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.0, the gdisurfacebits function processed SURFACEBITSCOMMAND messages sent by the RDP server. When these commands were processed using NSCodec, the bmp.width and bmp.height values provided by the server were not...

Astra Linux – Vulnerability in freerdp3, freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurred in the gdiSurfaceToSurface path of the FreeRDP client due to a mismatch between destination rectangle clamping and the actual copy size. A malicious server can...

CVE-2026-65662

Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally...

CVE-2026-62890

Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally...

CVE-2026-62822

Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network...

CVE-2026-62709

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...

CVE-2026-61360

Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally...

CVE-2026-62822 Windows GDI+ Remote Code Execution Vulnerability

...

CVE-2026-62822

CVE-2026-62822 describes an integer overflow/wraparound in Windows GDI+ that allows an unauthenticated attacker to execute code remotely over a network. The CVSSv3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a base score of 8.8 ( HIGH ), indicating high impact for confidentiality, integ...

CVE-2026-62822 Windows GDI+ Remote Code Execution Vulnerability

...

EUVD-2026-56677

Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network...

CVE-2026-62709 Windows GDI+ Information Disclosure Vulnerability

...

EUVD-2026-56632

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...

CVE-2026-62709 Windows GDI+ Information Disclosure Vulnerability

...

CVE-2026-62709

The CVE describes an information-disclosure flaw in Windows GDI+. Affected component: Windows GDI+ (graphics rendering). Root cause: use of an uninitialized resource, enabling an authorized local attacker to disclose information. Impact: confidentiality loss with a CVSS v3.1 base score of 5.5 (Lo...

CVE-2026-61360

The CVE-2026-61360 entry concerns an issue in Windows GDI described as an untrusted pointer dereference that could allow an authorized attacker to disclose information locally. Affected component is Windows GDI; root cause is a pointer dereference involving untrusted data, enabling local informat...