CVE-2019-0903
Microsoft GDI Remote Code Execution Vulnerability
CVSS
—
Sem CVSS
EPSS
21.7%
p98
KEV
SIM
25 de mar. de 2022
Exploit Today
79
0-100
Publicado: — · Última mod.: —
21.7%EPSS · 30 dias21.7%
2026-10-082026-11-05
Produto
Microsoft / Graphics Device Interface (GDI)
Vulnerabilidade
Microsoft GDI Remote Code Execution Vulnerability
Adicionado ao KEV
25 de mar. de 2022
Corrigir até
15 de abr. de 2022
Uso conhecido em ransomware
Não
Descrição resumida
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system.
Ação necessária
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2019-0903
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2017-0001—87.9%
KEV—76Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability—