Unique info disclosure vulnerability in Windows Graphics Component (CVE-2022-37985), triggered by rendering a crafted EMF image, enabling remote code execution in Microsoft Word and defeating ASLR protection. Explored in Microsoft's patch.
Reporter | Title | Published | Views | Family All 50 |
---|---|---|---|---|
Trellix | The Art of Information Disclosure: A Deep Dive into CVE-2022-37985, a Unique Information Disclosure Vulnerability in Windows Graphics Component | 3 May 202300:00 | – | trellix |
Trellix | The Tale of Two Exploits - Breaking Down CVE-2023-36884 and the Infection Chain | 24 Aug 202300:00 | – | trellix |
Trellix | The Tale of Two Exploits - Breaking Down CVE-2023-36884 and the Infection Chain | 24 Aug 202300:00 | – | trellix |
CVE | CVE-2022-3785 | 31 Oct 202221:15 | – | cve |
CVE | CVE-2022-37985 | 11 Oct 202219:15 | – | cve |
UbuntuCve | CVE-2022-3785 | 31 Oct 202200:00 | – | ubuntucve |
Cvelist | CVE-2022-3785 Axiomatic Bento4 Avcinfo SetDataSize heap-based overflow | 31 Oct 202200:00 | – | cvelist |
Cvelist | CVE-2022-37985 Windows Graphics Component Information Disclosure Vulnerability | 11 Oct 202200:00 | – | cvelist |
Prion | Heap overflow | 31 Oct 202221:15 | – | prion |
Prion | Information disclosure | 11 Oct 202219:15 | – | prion |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo