CVE-2025-54919 Windows Graphics Component Remote Code Execution Vulnerability

...

CVE-2025-54919

CVE-2025-54919 is linked to Windows Win32K GRFX and is described as a race condition in a shared resource that could allow an authorized, local attacker to execute code. The Connected documents confirm the CVE within Windows Win32K GRFX but do not provide concrete exploit details, affected versio...

CVE-2025-54919 Windows Graphics Component Remote Code Execution Vulnerability

...

CLSA-2025-1757427057 grafana: Fix of CVE-2022-23552

CVE-2022-23552: sanitize SVG inputs in GeoMap by adding a dompurify preprocessor step, preventing stored XSS where malicious SVG could execute arbitrary JavaScript...

Windows Hyper-V Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to execute code locally...

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Graphics Kernel allows an authorized attacker to elevate privileges locally...

Windows Graphics Component Elevation of Privilege Vulnerability

No cwe for this issue in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

Graphics Kernel Remote Code Execution Vulnerability

Time-of-check time-of-use toctou race condition in Graphics Kernel allows an authorized attacker to execute code locally...

Graphics Kernel Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Graphics Kernel allows an authorized attacker to execute code locally...

Windows Graphics Component Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to execute code locally...

Windows Graphics Component Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

Windows Graphics Component Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to execute code locally...

firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Denial-of-service due to out-of-memory in the Graphics: WebRender component...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update ...

Microsoft Graphics Component 资源管理错误漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Graphics Component. An attacker could exploit this vulnerability to elevate privileges. The following products and editions are affected:Window...

Microsoft Graphics Component 安全漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are affected:Windows 10 Versio...

PT-2025-36892

Name of the Vulnerable Software and Affected Versions: Graphics Kernel affected versions not specified Description: A time-of-check time-of-use toctou race condition exists in the Graphics Kernel. This condition allows a local attacker with authorization to execute code. The vulnerability also...

PT-2025-36823

Name of the Vulnerable Software and Affected Versions: Microsoft Graphics Component affected versions not specified Description: The issue allows an authorized attacker to elevate privileges locally. This is an elevation-of-privilege vulnerability that can affect the system. Recommendations: At t...

PT-2025-36889

Name of the Vulnerable Software and Affected Versions: Windows Win32K - GRFX affected versions not specified Description: The issue involves concurrent execution using a shared resource with improper synchronization, specifically a race condition within Windows Win32K - GRFX. This allows an...

Microsoft Graphics Kernel 竞争条件问题漏洞

Microsoft Graphics Kernel is a kernel-mode graphics driver subsystem from Microsoft Corporation USA. A competitive condition issue vulnerability exists in Microsoft Graphics Kernel. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...