Lucene search
+L

44 matches found

Kitploit
Kitploit
•added 2026/10/01 3:17 p.m.•14 views

BrokenType

BrokenType BrokenType 是一套用于测试字体光栅化软件鲁棒性和安全性的工具集,尤其针对容易出现内存损坏问题的代码库(例如基于 C/C++ 及其类似语言编写的)。它包含以下组件: TrueType 程序生成器 - 一个 Python 脚本,用于生成随机但有效的 TrueType 程序。 TTF/OTF 变异器 - 一个用 C++ 编写的半“智能”二进制字体文件变异器。 Windows GDI 的 TTF/OTF 加载器 - 一个用于通过 Windows GDI/Uniscribe 加载和测试自定义字体的实用工具。 DirectWrite 的 TTF/OTF 加载器 -...

6AI score
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2026/09/25 11:51 p.m.•7 views

SUSE CVE-2026-88367

NanoSVG 239e102ec contains an incorrect numeric conversion vulnerability in nsvgcurveDivs during SVG stroke rasterization. A specially crafted SVG document containing an extremely large stroke-width can cause floating-point rounding to produce a zero subdivision angle. The subsequent arc division...

6.5CVSS5.9AI score0.00245EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/25 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-88367

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NanoSVG 239e102ec contains an incorrect numeric conversion vulnerability in nsvgcurveDivs during SVG stroke rasterization. A specially crafted SVG document...

6.5CVSS5.8AI score0.00245EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/24 6:10 p.m.•11 views

CVE-2026-88367

A flaw was found in NanoSVG. By providing a specially crafted SVG document with an excessively large stroke width, an attacker can trigger an improper numeric conversion during stroke rasterization. This issue causes an unexpected process termination, leading to a Denial of Service DoS...

6.5CVSS5.7AI score0.00245EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/24 5:17 p.m.•10 views

CVE-2026-88367

NanoSVG 239e102ec contains an incorrect numeric conversion vulnerability in nsvgcurveDivs during SVG stroke rasterization. A specially crafted SVG document containing an extremely large stroke-width can cause floating-point rounding to produce a zero subdivision angle. The subsequent arc division...

6.5CVSS0.00245EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•10 views

CVE-2026-88367: Incorrect Conversion between Numeric Types

NanoSVG 239e102ec contains an incorrect numeric conversion vulnerability in nsvgcurveDivs during SVG stroke rasterization. A specially crafted SVG document containing an extremely large stroke-width can cause floating-point rounding to produce a zero subdivision angle. The subsequent arc division...

6.5CVSS5.9AI score0.00245EPSS
SaveExploits0References2
OSV
OSV
•added 2026/04/29 7:02 a.m.•31 views

CLSA-2026-1777446167 pixman: Fix of CVE-2022-44638

CVE-2022-44638: Integer overflow in pixmansamplefloory leading to heap out-of-bounds write in rasterizeedges8...

8.8CVSS7.5AI score0.01524EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/04/15 7:23 p.m.•13 views

CVE-2026-26178

Integer size truncation in Windows Advanced Rasterization Platform WARP allows an unauthorized attacker to elevate privileges locally...

8.8CVSS5.8AI score0.00819EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/04/15 12:00 a.m.•14 views

The vulnerability of the Windows Advanced Rasterization Platform (WARP) in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows Advanced Rasterization Platform WARP in Windows operating systems is related to integer overflow. Exploiting this vulnerability can allow a remote attacker to gain elevated privileges...

10CVSS5.9AI score0.00819EPSS
SaveExploits0References2Affected Software16
EUVD
EUVD
•added 2026/04/14 6:30 p.m.•18 views

EUVD-2026-22418

Integer size truncation in Windows Advanced Rasterization Platform WARP allows an unauthorized attacker to elevate privileges locally...

8.8CVSS5.7AI score0.00819EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/14 6:16 p.m.•13 views

CVE-2026-26178

Integer size truncation in Windows Advanced Rasterization Platform WARP allows an unauthorized attacker to elevate privileges locally...

8.8CVSS0.00819EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/14 4:58 p.m.•72 views

CVE-2026-26178

CVE-2026-26178 is a Windows Advanced Rasterization Platform Elevation of Privilege vulnerability with CVSS v3.1 base score 8.8 (HIGH). The issue is exploitable via NETWORK with LOW attack complexity and NONE privileges required, but it requires user interaction. Impact is rated HIGH for confident...

8.8CVSS7.6AI score0.00819EPSS
SaveExploits0References1Affected Software12
Vulnrichment
Vulnrichment
•added 2026/04/14 4:58 p.m.•7 views

CVE-2026-26178 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability

...

8.8CVSS7.7AI score0.00819EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/04/14 4:58 p.m.•42 views

CVE-2026-26178 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability

...

8.8CVSS0.00819EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:00 p.m.•15 views

Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability

Integer size truncation in Windows Advanced Rasterization Platform WARP allows an unauthorized attacker to elevate privileges locally...

8.8CVSS7.7AI score0.00819EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•27 views

Microsoft Windows 安全漏洞

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. There are security vulnerabilities in the Microsoft Windows Advanced Rasterization Platform. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and...

8.8CVSS5.8AI score0.00819EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•20 views

PT-2026-32755

CVE-2026-26178 Integer size truncation in Windows Advanced Rasterization Platform WARP allows an unauthorized attacker to elevate privileges locally. https://t.co/6dbFxYiIih...

8.8CVSS6.2AI score0.00819EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•1 views

CVE-2026-26178: Incorrect Conversion between Numeric Types

Integer size truncation in Windows Advanced Rasterization Platform WARP allows an unauthorized attacker to elevate privileges locally...

8.8CVSS5.7AI score0.00819EPSS
SaveExploits0References3
Fedora
Fedora
•added 2025/05/23 3:26 a.m.•18 views

[SECURITY] Fedora 42 Update: ghostscript-10.05.1-1.fc42

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...

4.5CVSS7AI score0.00184EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2023/07/26 12:00 a.m.•33 views

Fedora: Security Advisory for ghostscript (FEDORA-2023-83c805b441)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.04007EPSS
SaveExploits4References2
Rows per page
Query Builder