19605 matches found
EUVD-2026-10712
Copyparty is a portable file server. Prior to v1.20.11., the nohtml config option, intended to prevent execution of JavaScript in user-uploaded HTML files, did not apply to SVG images. A user with write-permission could upload an SVG containing embedded JavaScript, which would execute in the...
CVE-2026-25190
Untrusted search path in Windows GDI allows an unauthorized attacker to execute code locally...
CVE-2026-25190 Windows GDI Remote Code Execution Vulnerability
...
CVE-2026-25190
CVE-2026-25190 is a Windows GDI vulnerability (Untrusted search path) that enables local code execution. The CVE is documented across NVD/NCSC/EUVD with a base CVSS v3.1 score of 7.8 (High) and a local attack vector requiring user interaction. Microsoft has released fixes via March 2026 updates (...
CVE-2026-25190 Windows GDI Remote Code Execution Vulnerability
...
CVE-2026-25180
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally...
CVE-2026-25180
CVE-2026-25180 describes an out-of-bounds read in the Microsoft Graphics Component that can allow an unauthorized local attacker to disclose information. Connected sources (NVD, CVE listing, ENISA/NCSC advisories) confirm the affected component as Microsoft Graphics Component and the impact as lo...
CVE-2026-25180 Windows Graphics Component Information Disclosure Vulnerability
...
CVE-2026-25180 Windows Graphics Component Information Disclosure Vulnerability
...
CVE-2026-25169
Divide by zero in Microsoft Graphics Component allows an unauthorized attacker to deny service locally...
CVE-2026-25169 Windows Graphics Component Denial of Service Vulnerability
...
CVE-2026-25169
Technical details about CVE-2026-25169 are not provided in the supplied documents. No affected products, vulnerable components, impact, or remediation are specified here. Monitor for updates.
CVE-2026-25169 Windows Graphics Component Denial of Service Vulnerability
...
CVE-2026-25168 Windows Graphics Component Denial of Service Vulnerability
...
CVE-2026-25168
CVE-2026-25168 is a Windows Graphics Component denial-of-service vulnerability. Exploitation requires local access with low complexity and no user interaction, and can cause an availability impact flagged as HIGH. The CVSSv3.1 score is 6.2 (MEDIUM overall) with an exploit that is unproven and rem...
CVE-2026-25168
Null pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to deny service locally...
CVE-2026-25168 Windows Graphics Component Denial of Service Vulnerability
...
CVE-2026-23668 Windows Graphics Component Elevation of Privilege Vulnerability
...
CVE-2026-23668
CVE-2026-23668 affects the Windows Graphics Component and is an elevation-of-privilege vulnerability. The advisory indicates a local attack vector with high attack complexity, requiring low privileges and no user interaction (UI: NONE). The vulnerability impacts confidentiality, integrity, and av...