CVE-2019-0903

CVE Published 2019-05-16
Related Vendor(s) microsoft
Related Product(s) windows_8.1, windows_server_2008, windows_server_2012, windows_10, windows_server_2019, windows_server_2016, windows_7, windows_rt_8.1
Exploitation Reported (CISA KEV) 2022-03-25
CVSS 3 Base Score 8.8 (HIGH)
CVSS 3 Attack Complexity LOW
CVSS 3 Attack Vector NETWORK

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.

Cyber Threat Graph Context

Explore how this CVE relates to the wider threat graph

References