CVE-2026-69884

A buffer over-read vulnerability exists in Windows GDI . This flaw allows an authorized attacker to perform a local privilege elevation . The vulnerability is associated with CWE-126 . While the documents confirm the impact is high for confidentiality, integrity, and availability, no specific exp...

CVE-2026-83934

A stack-based buffer overflow vulnerability exists in Windows GDI+ , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as HIGH severity with a CVSS 3.1 score of 8.8, as it could impact confidentiality, integrity, and availabilit...

CVE-2026-83651

A vulnerability exists in Windows GDI caused by an out-of-bounds read (CWE-125). This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability has a MEDIUM base severity (CVSS 3.1 score of 6.5) and requires user interaction . While the vulnerability is confir...

CVE-2026-85797

An out-of-bounds read vulnerability exists in the Windows GDI component. This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 (Out-of-bounds Read) and CWE-20 (Improper Input Validation). No specific exploit details or softw...

BrokenType

BrokenType BrokenType is a set of tools designed to test the robustness and security of font rasterization software, especially codebases prone to memory corruption issues written in C/C++ and similar languages. It consists of the following components: TrueType program generator - a Python script...

CVE-2026-77491

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...

CVE-2026-69288

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...

CVE-2026-68827

Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...

CVE-2026-69288

CVE-2026-69288 is a use of uninitialized resource vulnerability in Windows GDI+ that allows a locally authenticated attacker with low privileges to disclose information . The attack vector is local , requires no user interaction , and has no impact on integrity or availability , with a high confi...

EUVD-2026-73422

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...

CVE-2026-68827

CVE-2026-68827 is an integer underflow (wrap or wraparound) vulnerability in Windows GDI+ that allows an authorized attacker to achieve elevation of privileges over a network . The vulnerability is rated HIGH severity (CVSS 8.0) with a vector of AV:N/AC:L/PR:L/UI:R, meaning exploitation requires ...

EUVD-2026-73399

Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73263

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...

CVE-2026-77491

CVE-2026-77491 is an out-of-bounds read in Windows GDI that allows an unauthorized local attacker to disclose information. The CVSS 3.1 base score is 5.5 (MEDIUM) with a local attack vector, no privileges required, user interaction required, and high confidentiality impact but no integrity or ava...

Windows GDI+ Elevation of Privilege Vulnerability

Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...

Windows GDI+ Information Disclosure Vulnerability

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...

Windows GDI Information Disclosure Vulnerability

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...

PT-2026-87950

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...

PT-2026-87266

Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description An integer underflow wrap or wraparound occurs in Windows GDI+, which is a graphics API used for rendering 2D and 3D graphics. This issue allows an authorized attacker to elevate...

PT-2026-87335

Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description Use of an uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally. This issue can enable attackers to obtain sensitive information and affect...