Lucene search
K

385 matches found

OSV
OSV
added 6 days ago4 views

DEBIAN-CVE-2026-44421

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client by sending crafted RDPGFX PDUs. The bug is in gdiCacheToSurface: it validates a destination rectangle that is clamped to UINT16MA...

8.8CVSS5.9AI score0.00051EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/05/28 9:36 a.m.5 views

CVE-2026-46156

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix potential ADE in loongsongpufixupdmahang The switch case in loongsongpufixupdmahang may not DC2 or DC3, and readlcrtcreg will access with random address, because the "device" is from "base+PCIDEVICEID", "base" is...

5.8AI score0.00032EPSS
Exploits0References7Affected Software1
Debian CVE
Debian CVE
added 2026/05/26 2:8 p.m.5 views

CVE-2026-40033

FreeRDP before 3.26.0 contains a heap-buffer-overflow vulnerability in gdiCacheToSurface that allows remote attackers to write out-of-bounds heap memory. The vulnerability occurs because rectangle validation clamps coordinates to UINT16MAX but performs copy operations using unclamped cache entry...

8.8CVSS6.4AI score0.00068EPSS
Exploits1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.6 views

Astra Linux - уязвимость в ghostscript

A issue was discovered in Artifex Ghostscript prior to version 10.05.0. The NPDL device has a Compression buffer overflow in the contrib/japanese/gdevnpdl.c file...

9.8CVSS7AI score0.00212EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/05/13 8:22 p.m.2 views

CVE-2026-35421

Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally...

7.8CVSS6.1AI score0.00062EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/12 6:30 p.m.16 views

EUVD-2026-29628

Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally...

7.8CVSS6.1AI score0.00062EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/05/12 4:58 p.m.4 views

CVE-2026-35421 Windows GDI Remote Code Execution Vulnerability

...

7.8CVSS5.8AI score0.00062EPSS
Exploits0References1
CVE
CVE
added 2026/05/12 4:58 p.m.26 views

CVE-2026-35421

CVE-2026-35421 describes a heap-based buffer overflow in Windows GDI that permits a local attacker to execute arbitrary code. The entry lists a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, NO privileges required, user interaction required, and impacts to con...

7.8CVSS6.1AI score0.00062EPSS
Exploits0References1Affected Software14
Microsoft CVE
Microsoft CVE
added 2026/05/12 2:0 p.m.9 views

Windows GDI Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally...

7.8CVSS6.1AI score0.00062EPSS
Exploits0
Kaspersky
Kaspersky
added 2026/05/12 12:0 a.m.11 views

KLA91038 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, gain privileges, execute arbitrary code, obtain sensitive information. Below is a complete list of...

9.8CVSS6.8AI score0.00257EPSS
Exploits5References65
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.6 views

PT-2026-40182

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A heap-based buffer overflow in the Windows GDI Graphics Device Interface, which is the graphics subsystem of Windows, allows an unauthorized attacker to execute code locally. Recommendations...

7.8CVSS6.2AI score0.00062EPSS
Exploits0References4
EUVD
EUVD
added 2026/04/14 6:30 p.m.1 views

EUVD-2026-22486

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00051EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/04/14 4:58 p.m.2 views

CVE-2026-27930 Windows GDI Information Disclosure Vulnerability

...

5.5CVSS5.8AI score0.00051EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/14 4:58 p.m.22 views

CVE-2026-27930 Windows GDI Information Disclosure Vulnerability

...

5.5CVSS0.00051EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/14 4:57 p.m.27 views

CVE-2026-27931 Windows GDI Information Disclosure Vulnerability

...

5.5CVSS0.00051EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/14 4:57 p.m.2 views

CVE-2026-27931 Windows GDI Information Disclosure Vulnerability

...

5.5CVSS5.8AI score0.00051EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2026/04/14 2:0 p.m.3 views

Windows GDI Information Disclosure Vulnerability

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...

5.5CVSS6.2AI score0.00051EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2026/04/14 2:0 p.m.2 views

Windows GDI Information Disclosure Vulnerability

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...

5.5CVSS6.2AI score0.00051EPSS
Exploits0
CNNVD
CNNVD
added 2026/04/14 12:0 a.m.2 views

Microsoft Windows GDI 缓冲区错误漏洞

Microsoft Windows GDI is a core underlying standard interface in the Windows operating system developed by Microsoft, responsible for drawing graphical objects on the screen or printer, managing fonts, and processing images. There is a buffer error vulnerability present in Microsoft Windows GDI...

5.5CVSS6AI score0.00051EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/10 6:31 p.m.0 views

EUVD-2026-10665

Untrusted search path in Windows GDI allows an unauthorized attacker to execute code locally...

7.8CVSS5.9AI score0.00038EPSS
Exploits0References2
Rows per page
Query Builder