22543 matches found
CVE-2022-50906
e107 CMS 3.2.1 is affected by an upload restriction bypass in the media manager that lets authenticated administrators upload SVG files containing stored XSS payloads. The root cause is bypassing upload restrictions, enabling SVGs with embedded scripts to execute when viewed. Impact is described ...
CVE-2026-20836
Concurrent execution using shared resource with improper synchronization 'race condition' in Graphics Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-20836
Concurrent execution using shared resource with improper synchronization 'race condition' in Graphics Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-20822
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2026-20822
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2026-20814
Concurrent execution using shared resource with improper synchronization 'race condition' in Graphics Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-20814
Concurrent execution using shared resource with improper synchronization 'race condition' in Graphics Kernel allows an authorized attacker to elevate privileges locally...
CVE-2025-10865
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of reference counting to cause a potential use after free. Improper reference counting on an internal resource caused scenario where potential for use after free was present...
CVE-2025-10865
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of reference counting to cause a potential use after free. Improper reference counting on an internal resource caused scenario where potential for use after free was present...
CVE-2026-20836 DirectX Graphics Kernel Elevation of Privilege Vulnerability
...
CVE-2026-20836
CVE-2026-20836 is a Windows graphics kernel vulnerability where a race condition in a shared resource allows local privilege elevation. The issue stems from concurrent execution with improper synchronization in the Graphics Kernel. The impact is local privilege escalation (C:H/I:H/A:H per CVSS 3....
CVE-2026-20836 DirectX Graphics Kernel Elevation of Privilege Vulnerability
...
CVE-2026-20822 Windows Graphics Component Elevation of Privilege Vulnerability
...
CVE-2026-20822
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2026-20822
CVE-2026-20822 is a Microsoft Windows graphics subsystem elevation-of-privilege vulnerability in the Microsoft Graphics Component caused by a use-after-free condition. It enables a locally authenticated attacker to elevate privileges on the host. The CVSS vector (Local, High complexity, Low privi...
CVE-2026-20822 Windows Graphics Component Elevation of Privilege Vulnerability
...
CVE-2026-20814
Concurrent execution using shared resource with improper synchronization 'race condition' in Graphics Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-20814
CVE-2026-20814 is a local privilege-escalation in the Microsoft Graphics Kernel caused by a race condition when accessing a shared resource. An authorized local attacker could elevate privileges on affected Windows systems. The issue is documented in multiple sources (e.g., CVE lists and ENISA EU...