cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2018-0750,https://securityvulnerability.io/vulnerability/CVE-2018-0750,,"The Windows GDI component in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory, aka ""Windows Elevation of Privilege Vulnerability"".",Microsoft,Windows Gdi,5.5,MEDIUM,0.006370000075548887,false,false,false,false,,false,false,2018-01-04T14:29:00.000Z,0 CVE-2017-11816,https://securityvulnerability.io/vulnerability/CVE-2017-11816,,"The Microsoft Windows Graphics Device Interface (GDI) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability in the way it handles objects in memory, aka ""Windows GDI Information Disclosure Vulnerability"".",Microsoft,Microsoft Windows Graphics Device Interface (gdi),5.5,MEDIUM,0.012389999814331532,false,false,false,false,,false,false,2017-10-13T13:29:00.000Z,0 CVE-2017-8676,https://securityvulnerability.io/vulnerability/CVE-2017-8676,,"The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Add-in and Console allows an authenticated attacker to retrieve information from a targeted system via a specially crafted application, aka ""Windows GDI+ Information Disclosure Vulnerability.""",Microsoft,Windows Graphics Device Interface (gdi),3.3,LOW,0.09185999631881714,false,false,false,false,,false,false,2017-09-13T01:29:00.000Z,0 CVE-2017-8685,https://securityvulnerability.io/vulnerability/CVE-2017-8685,,"Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows information disclosure by the way it discloses kernel memory addresses, aka ""Windows GDI+ Information Disclosure Vulnerability"". This CVE ID is unique from CVE-2017-8684 and CVE-2017-8688.",Microsoft,Windows Gdi+,5.5,MEDIUM,0.5052700042724609,false,false,false,false,,false,false,2017-09-13T01:29:00.000Z,0 CVE-2017-8677,https://securityvulnerability.io/vulnerability/CVE-2017-8677,,"The Windows GDI+ component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly discloses kernel memory addresses, aka ""Win32k Information Disclosure Vulnerability"". This CVE ID is unique from CVE-2017-8678, CVE-2017-8680, CVE-2017-8681, and CVE-2017-8687.",Microsoft,Windows Gdi+ Component,5.5,MEDIUM,0.012389999814331532,false,false,false,false,,false,false,2017-09-13T01:29:00.000Z,0 CVE-2017-8688,https://securityvulnerability.io/vulnerability/CVE-2017-8688,,"Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows information disclosure by the way it discloses kernel memory addresses, aka ""Windows GDI+ Information Disclosure Vulnerability"". This CVE ID is unique from CVE-2017-8684 and CVE-2017-8685.",Microsoft,Windows Gdi+,5.5,MEDIUM,0.012389999814331532,false,false,false,false,,false,false,2017-09-12T00:00:00.000Z,0 CVE-2017-8684,https://securityvulnerability.io/vulnerability/CVE-2017-8684,,"Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1, allows information disclosure by the way it discloses kernel memory addresses, aka ""Windows GDI+ Information Disclosure Vulnerability"". This CVE ID is unique from CVE-2017-8685 and CVE-2017-8688.",Microsoft,Windows Gdi+,5.5,MEDIUM,0.5052700042724609,false,false,false,false,,false,false,2017-09-12T00:00:00.000Z,0 CVE-2017-0001,https://securityvulnerability.io/vulnerability/CVE-2017-0001,,"The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka ""Windows GDI Elevation of Privilege Vulnerability."" This vulnerability is different from those described in CVE-2017-0005, CVE-2017-0025, and CVE-2017-0047.",Microsoft,Windows Gdi,7.8,HIGH,0.026019999757409096,true,false,false,true,,false,false,2017-03-17T00:00:00.000Z,0 CVE-2017-0062,https://securityvulnerability.io/vulnerability/CVE-2017-0062,,"The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka ""GDI+ Information Disclosure Vulnerability."" This vulnerability is different from those described in CVE-2017-0060 and CVE-2017-0073.",Microsoft,Windows Gdi+,4.7,MEDIUM,0.006000000052154064,false,false,false,false,,false,false,2017-03-17T00:00:00.000Z,0 CVE-2017-0047,https://securityvulnerability.io/vulnerability/CVE-2017-0047,,"The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka ""Windows GDI Elevation of Privilege Vulnerability."" This vulnerability is different from those described in CVE-2017-0001, CVE-2017-0005 and CVE-2017-0025.",Microsoft,Windows Gdi,7.8,HIGH,0.0012000000569969416,false,false,false,false,,false,false,2017-03-17T00:00:00.000Z,0 CVE-2017-0025,https://securityvulnerability.io/vulnerability/CVE-2017-0025,,"The kernel-mode drivers in Microsoft Windows Vista; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka ""Win32k Elevation of Privilege Vulnerability."" This vulnerability is different from those described in CVE-2017-0001, CVE-2017-0005, and CVE-2017-0047.",Microsoft,Windows Gdi,7.8,HIGH,0.0007600000244565308,false,false,false,false,,false,false,2017-03-17T00:00:00.000Z,0 CVE-2017-0060,https://securityvulnerability.io/vulnerability/CVE-2017-0060,,"The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka ""GDI+ Information Disclosure Vulnerability."" This vulnerability is different from those described in CVE-2017-0060 and CVE-2017-0062.",Microsoft,Windows Gdi+,5.5,MEDIUM,0.1525699943304062,false,false,false,false,,false,false,2017-03-17T00:00:00.000Z,0 CVE-2017-0005,https://securityvulnerability.io/vulnerability/CVE-2017-0005,,"The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka ""Windows GDI Elevation of Privilege Vulnerability."" This vulnerability is different from those described in CVE-2017-0001, CVE-2017-0025, and CVE-2017-0047.",Microsoft,Windows Gdi,7.8,HIGH,0.01931999996304512,true,false,false,true,true,false,false,2017-03-17T00:00:00.000Z,0 CVE-2017-0073,https://securityvulnerability.io/vulnerability/CVE-2017-0073,,"The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka ""Windows GDI+ Information Disclosure Vulnerability."" This vulnerability is different from those described in CVE-2017-0060 and CVE-2017-0062.",Microsoft,Windows Gdi+,4.3,MEDIUM,0.3334200084209442,false,false,false,false,,false,false,2017-03-17T00:00:00.000Z,0