17 matches found
CVE-2026-44811
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-44802
CVE-2026-44802 is a use-after-free in Windows DWM Core Library that enables a local privilege escalation by an authorized user. CVSS 3.1 base score 7.8 (High) with local attack vector, low attack complexity, and require low privileges with no user interaction; impact to confidentiality, integrity...
CVE-2025-36510
Improper buffer restrictions for some Display Virtualization for Windows OS driver software within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may...
CVE-2025-33217
NVIDIA’s January 2026 security bulletin addresses CVEs affecting Windows/Linux drivers and vGPU software. CVE-2025-33217 (Windows Display Driver) and CVE-2025-33218 (kernel-mode nvlddmkm.sys) can lead to code execution, privilege escalation, data tampering, DoS, or disclosure via use-after-free/o...
EUVD-2016-9639
Malware in sbrugna...
EUVD-2019-15246
Malware in sbrugna...
CVE-2025-30400
Use after free in Windows DWM allows an authorized attacker to elevate privileges locally...
CVE-2024-30051
Windows DWM Core Library Elevation of Privilege Vulnerability...
CVE-2024-29022 Session Hijacking via XSS attack in header and session grid in Xibo CMS
Xibo is an Open Source Digital Signage platform with a web content management system and Windows display player software. In affected versions some request headers are not correctly sanitised when stored in the session and display tables. These headers can be used to inject a malicious script int...
CVE-2024-29023
CVE-2024-29023 affects Xibo CMS: session tokens are exposed in the session-search API response, enabling potential session hijacking when users have access to the sessions page. Affected software is Xibo: upgrades are recommended to close the issue. Remediation per sources: Upgrade to Xibo 3.3.10...
Huawei EMUI 安全漏洞
Huawei EMUI is an Android-based mobile operating system developed by Chinese company Huawei. A security vulnerability exists in Huawei EMUI, which stems from an authentication flaw that can be successfully exploited to cause advertisements and other windows to be displayed at any time. The...
The vulnerability of the basic Windows DWM library in the Windows operating system allows attackers to escalate their privileges.
The vulnerability of the Windows DWM base library in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
CVE-2021-1051
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which a local user can get elevated privileges to modify display configuration data, which may result in denial of service of the display...
The vulnerability of the Windows operating system’s display driver allows a hacker to disclose protected information.
The vulnerability of the Windows operating system’s display driver is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
PT-2020-4796 · Microsoft · Windows Canonical Display Driver +1
Name of the Vulnerable Software and Affected Versions: Windows Canonical Display Driver affected versions not specified Description: The issue is related to errors in processing objects in memory, which can allow an attacker to disclose protected information. This can potentially enable attackers...
CVE-2019-5676
NVIDIA Windows GPU Display driver software for Windows all versions contains a vulnerability in which it incorrectly loads Windows system DLLs without validating the path or signature also known as a binary planting or DLL preloading attack, leading to escalation of privileges through code...
NVIDIA Windows GPU Display Driver Input Validation Error Vulnerability
The NVIDIA Windows GPU Display Driver is a display driver for Windows systems. An array index reference vulnerability exists in the kernel mode layer nvlddmkm.sys create context command DDI DxgkDdiCreateContext in the NVIDIA Windows GPU display driver. The vulnerability stems from the product usi...