Windows GDI 信息泄漏漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://support.microsoft.com/zh-cn/topic/windows-gdi-%E4%BF%A1%E6%81%AF%E6%B3%84%E6%BC%8F%E6%BC%8F%E6%B4%9E%E7%9A%84%E5%AE%89%E5%85%A8%E6%9B%B4%E6%96%B0%E8%AF%B4%E6%98%8E-2017-%E5%B9%B4-10-%E6%9C%88-10-%E6%97%A5-4f6fff34-467f-0ffb-55b6-decbf7c6d502
• https://avd.aliyun.com/detail?id=AVD-2020-1179
• https://support.microsoft.com/zh-cn/topic/windows-server-2008-%E4%B8%AD-windows-gdi-%E4%BF%A1%E6%81%AF%E6%B3%84%E6%BC%8F%E6%BC%8F%E6%B4%9E%E7%9A%84%E5%AE%89%E5%85%A8%E6%9B%B4%E6%96%B0-2017-%E5%B9%B4-5-%E6%9C%88-9-%E6%97%A5-c256ba67-5a12-3fa9-4ae2-c9c5a01ea3bb
• https://www.cnvd.org.cn/patchInfo/show/205953
• https://avd.aliyun.com/detail?id=AVD-2019-1016
• https://nvd.nist.gov/vuln/detail/cve-2020-0874
• https://support.microsoft.com/en-us/topic/description-of-the-security-update-for-the-windows-gdi-information-disclosure-vulnerability-october-10-2017-4f6fff34-467f-0ffb-55b6-decbf7c6d502
• https://www.sentinelone.com/vulnerability-database/cve-2026-27930/
• https://zeropath.com/blog/windows-gdi-cve-2025-47984-information-disclosure

Related Vulnerabilities

• Windows截图工具NTLM信息泄露漏洞(CVE-2026-33829)
• Gradio /static//windows/win.ini 文件读取漏洞 （CVE-2026-28414）
• Windows Shell Link 敏感信息泄露与欺骗漏洞(CVE-2026-25185)
• PoCCVE-2025-13315: Twonky Server 8.5.2 on Linux and Windows - Log File Exposure
• Windows PolicyConfiguration 计划任务特权提升漏洞(CVE-2025-60710)
• Windows 11 PolicyConfiguration 计划任务特权提升漏洞（CVE-2025-60710）
• Windows 11 RAiLaunchAdminProcess 管理员保护特权提升漏洞
• （CVE-2025-62522）Vite开发服务器Windows环境下文件泄露漏洞
• (CVE-2025-41246) VMware Tools for Windows授权不当漏洞
• Windows NTLMv2-SSP Hash信息泄露漏洞(CVE-2025-50154)
• （CVE-2025-26513）SAN Host Utilities for Windows 8.0前版本安装程序本地权限提升漏洞
• (CVE-2025-8088) WinRAR Windows版本路径遍历漏洞可导致任意代码执行
• PoCCVE-2015-1635: Microsoft Windows 'HTTP.sys' - Remote Code Execution