CVE-2026-73018

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...

CVE-2026-72986

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...

CVE-2026-69576

Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally...

EUVD-2026-73753

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...

CVE-2026-73018

CVE-2026-73018 is a heap-based buffer overflow in the Graphic Fonts component that allows an unauthorized attacker to achieve remote code execution over a network, with user interaction required . Scored CVSS 8.8 HIGH (C/H I/H A/H) and published by Microsoft (source: [email protected]). No spe...

EUVD-2026-73260

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...

CVE-2026-72986

CVE-2026-72986 is a heap-based buffer overflow in Graphic Fonts that allows an unauthorized attacker to achieve remote code execution over a network. The CNA (Microsoft) assigns a CVSS 3.1 score of 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a network-reachable exp...

EUVD-2026-73143

Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally...

CVE-2026-69576

CVE-2026-69576 is a use-after-free vulnerability in the Microsoft Graphic Fonts component that allows an authorized attacker with low privileges to elevate privileges locally without user interaction. The CNA-assigned CVSS v3.1 score is 7.8 (HIGH) , with high impact across confidentiality, integr...

Graphic Fonts Remote Code Execution Vulnerability

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...

Graphic Fonts Remote Code Execution Vulnerability

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...

Graphic Fonts Elevation of Privilege Vulnerability

Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally...

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge web browsers allows attackers to expose protected information.

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge relates to errors during variable initialization. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created HTML page...

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge web browsers allows attackers to expose protected information.

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge relates to errors during variable initialization. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created HTML page...

The vulnerability of the console-based graphic editor ImageMagick, related to integer overflow, allows a hacker to cause a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerability in LibreOffice

Unchecked script execution in the “Graphic on-click binding” mechanism in affected LibreOffice versions allows an attacker to create a document that will execute scripts built into LibreOffice upon clicking a graphic, without any prompts. These scripts were previously considered trusted, but now...

Astra Linux – Vulnerability in gdk-pixbuf

A flaw was discovered in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length instead of the actual number of bytes written. This logical error causes uninitialized sections of th...

EUVD-2026-55374

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix context pstate override handling There are several problems in the context pstate handling code. The most serious ones are potential use-after-free and NULL pointer dereferences at context initialization time. Bot...

EUVD-2026-55164

A stored cross-site scripting XSS vulnerability in lobehub/lobe-chat through v2.2.13 allows a low-privileged authenticated user to inject arbitrary JavaScript into the application by uploading a crafted SVG file as a user avatar...

CVE-2026-6694 Gimp: gimp file-png plugin: denial of service via oversized apng trns chunk

A flaw was found in GIMP's file-png plugin. A remote attacker can exploit this by crafting a malicious Animated Portable Network Graphics APNG image containing an oversized tRNS chunk. This can lead to a stack-based buffer overflow CWE-121, causing the file-png plugin to crash and resulting in a...