CVE-2025-50165

CVE-2025-50165 targets the Windows/Microsoft Graphics Component through an untrusted pointer dereference in JPEG decoding, enabling remote code execution. Exploitation relies on specially crafted images (e.g., JPEG metadata segments) to trigger code execution without user interaction on affected ...

CVE-2025-50161

CVE-2025-50161 is a heap-based buffer overflow affecting Windows Win32K - GRFX. The vulnerability allows an authorized attacker to achieve local privilege escalation. Exploitation requires user interaction and low privileges before escalation. Microsoft has released security updates addressing vu...

CVE-2025-49743 Windows Graphics Component Elevation of Privilege Vulnerability

...

CVE-2025-49743 Windows Graphics Component Elevation of Privilege Vulnerability

...

CVE-2025-49743

CVE-2025-49743 is a local privilege-escalation vulnerability in the Microsoft Graphics Component caused by a race condition due to improper synchronization when a shared resource is accessed concurrently. The issue affects Windows graphics-related code paths and can let an authorized, local attac...

CVE-2025-27717

Uncontrolled search path for some IntelR Graphics Driver software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-27717

Uncontrolled search path for some IntelR Graphics Driver software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-27717

CVE-2025-27717: An uncontrolled search path in some Intel® Graphics Driver software may allow an authenticated user to escalate privileges via local access. The issue is detailed across multiple sources, including Intel’s advisory Intel-SA-01299, which lists affected Intel Graphics Driver compone...

CVE-2025-24835

The CVE-2025-24835 entry concerns Intel Graphics Driver for Intel Arc graphics (including Arc B-Series). The vulnerability is a protection mechanism failure in the Intel Graphics Driver that may allow an authenticated local user to cause a denial of service. Affected software includes Intel Arc B...

CVE-2025-24515

NULL pointer dereference for some IntelR Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-24515

CVE-2025-24515 concerns a NULL pointer dereference in Intel Graphics Drivers that can allow an authenticated local user to cause a denial of service. Affected software includes Intel Graphics Drivers for Arc and Iris Xe graphics, Arc Pro, Data Center GPU Flex, and older Core/Atom/Pentium/Celeron ...

CVE-2025-24515

NULL pointer dereference for some IntelR Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-20023

CVE-2025-20023 affects Intel Graphics Driver installers, where incorrect default permissions may allow an authenticated local user to escalate privileges. Affected products include Intel\u00a0Graphics Drivers for Arc, Iris Xe, Pro, Data Center GPU Flex, and related processors; root cause is impro...

CVE-2025-20023

Incorrect default permissions for some IntelR Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20023

Incorrect default permissions for some IntelR Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-55166 svg-sanitizer By-Passing Attribute Sanitization

savg-sanitizer is a PHP SVG/XML sanitizer. Prior to version 0.22.0, the sanitization logic in the cleanXlinkHrefs method only searches for lower-case attribute name, which allows to by-pass the isHrefSafeValue check. As a result this allows cross-site scripting or linking to external domains. Thi...

CVE-2025-55166 svg-sanitizer By-Passing Attribute Sanitization

savg-sanitizer is a PHP SVG/XML sanitizer. Prior to version 0.22.0, the sanitization logic in the cleanXlinkHrefs method only searches for lower-case attribute name, which allows to by-pass the isHrefSafeValue check. As a result this allows cross-site scripting or linking to external domains. Thi...

CVE-2025-55166 svg-sanitizer By-Passing Attribute Sanitization

savg-sanitizer is a PHP SVG/XML sanitizer. Prior to version 0.22.0, the sanitization logic in the cleanXlinkHrefs method only searches for lower-case attribute name, which allows to by-pass the isHrefSafeValue check. As a result this allows cross-site scripting or linking to external domains. Thi...

NVIDIA GPU Display Driver - July 2025 - Lenovo Support US

No description provided...

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DirectX allows an authorized attacker to elevate privileges locally...