2237 matches found
CVE-2016-0040
CVE-2016-0040 This exploit builds upon SMMRootkit's 32Bit project https://github.com/Rootkitsmm/cve-2016-0040 which causes this vulnerability to trigger a BSoD with all 'a's in RCX and 'B's in RAX. It was ported to 64Bit Windows 7 SP1 and doesn't use the "mov rcx+06h, rax" instruction for inital...
BrokenType
BrokenType BrokenType is a set of tools designed to test the robustness and security of font rasterization software, especially codebases prone to memory corruption issues written in C/C++ and similar languages. It consists of the following components: TrueType program generator - a Python script...
Astra Linux – Vulnerability in freerdp2
FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The affected versions are subject to an IntegerOverflow issue, which leads to an Out-of-Bound Write Vulnerability in the gdiCreateSurface function. This issue only affects FreeRDP-based clients...
Astra Linux – Vulnerability in freerdp3
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, deleting offscreen bitmaps caused gdi-drawing to point to freed memory, leading to UAF when related update packets arrived. A malicious server could trigger client-side operations after objects were freed,...
Astra Linux – Vulnerability in freerdp3, freerdp2
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurred in the gdiSurfaceToSurface path of the FreeRDP client due to a mismatch between destination rectangle clamping and the actual copy size. A malicious server can...
Astra Linux – Vulnerability in freerdp3
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.0, the gdisurfacebits function processed SURFACEBITSCOMMAND messages sent by the RDP server. When these commands were processed using NSCodec, the bmp.width and bmp.height values provided by the server were not...
CVE-2026-77491
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...
CVE-2026-69288
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...
CVE-2026-68827
Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73422
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...
CVE-2026-69288
CVE-2026-69288 is a use of uninitialized resource vulnerability in Windows GDI+ that allows a locally authenticated attacker with low privileges to disclose information . The attack vector is local , requires no user interaction , and has no impact on integrity or availability , with a high confi...
CVE-2026-68827
CVE-2026-68827 is an integer underflow (wrap or wraparound) vulnerability in Windows GDI+ that allows an authorized attacker to achieve elevation of privileges over a network . The vulnerability is rated HIGH severity (CVSS 8.0) with a vector of AV:N/AC:L/PR:L/UI:R, meaning exploitation requires ...
EUVD-2026-73399
Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...
CVE-2026-77491
CVE-2026-77491 is an out-of-bounds read in Windows GDI that allows an unauthorized local attacker to disclose information. The CVSS 3.1 base score is 5.5 (MEDIUM) with a local attack vector, no privileges required, user interaction required, and high confidentiality impact but no integrity or ava...
EUVD-2026-73263
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...
Windows GDI+ Elevation of Privilege Vulnerability
Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...
Windows GDI Information Disclosure Vulnerability
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...
Astra Linux – Vulnerability in freerdp2
FreeRDP is a free implementation of the Remote Desktop Protocol. Clients that use /bpp:32 and the legacy GDI drawing path, along with versions of FreeRDP prior to 3.5.0 or 2.11.6, are vulnerable to out-of-bounds read vulnerabilities. Versions 3.5.0 and 2.11.6 address this issue. As a workaround,...
Astra Linux – Vulnerability in freerdp2
FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions, a malicious server may trigger out-of-bound writes in a connected client. Connections that use GDI or SurfaceCommands to send graphics updates to the client may send...