948 matches found
CVE-2026-111132
A flaw was found in libgxps. An attacker can exploit this vulnerability by convincing a user to open a specially crafted XML Paper Specification XPS document containing malformed curve segment attributes. Successful exploitation triggers an out-of-bounds memory read, primarily causing an...
CVE-2026-111132
The GNOME libgxps library (through version 0.3.2 ) contains a heap out-of-bounds read vulnerability in the path_geometry_start_element() function. The root cause is triggered when processing a crafted XPS document containing PolyBezierSegment or PolyQuadraticBezierSegment Points attributes with a...
CVE-2026-111132 GNOME libgxps through 0.3.2 Heap Out-of-Bounds Read via path_geometry_start_element
GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in pathgeometrystartelement that allows attackers to read past allocations via crafted PolyBezierSegment or PolyQuadraticBezierSegment Points attributes. Attackers can supply a point count not divisible by three or two in a crafted XP...
GHSA-C27M-942F-RCFH Microsoft Security Advisory CVE-2026-87697 - .NET and Visual Studio Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. WPF XPS synthetic...
Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. WPF XPS hyperlink...
GHSA-F749-VHGX-39H6 Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. WPF XPS hyperlink...
Microsoft Security Advisory CVE-2026-96229 - .NET and Visual Studio Information Disclosure Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Restrictive XAML and...
CVE-2024-34329
CVE-2024-34329 Tested Product: Datacard XPS Card Printer Driver Version: = 8.4 Description: The application is prone to Local Privilege Escalation LPE vulnerability due to insecure file/folder permissions on its default installation, by which it grants the rights for everyone for full control ove...
The vulnerability of the Microsoft XPS Document Writer (MXDW) driver on Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft XPS Document Writer MXDW driver on Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: SUNRPC: Fixed null-ptr-deref when xps sysfs alloc fails There is a null-ptr-deref when xps sysfs alloc fails: BUG: KASAN: null-ptr-deref in sysfsdocreatelinksd+0x40/0xd0 Reading a 8-byte value at address 0000000000000030 by ta...
CVE-2026-69824
Integer underflow wrap or wraparound in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network...
CVE-2026-69376
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...
CVE-2026-69367
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...
CVE-2026-69345
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...
CVE-2026-69336
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...
CVE-2026-69313
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...
CVE-2026-69308
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...
CVE-2026-69271
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...