CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows GDI+ Memory Corruption Remote Code Execution Vulnerability (CVE-2019-0903) Security Advisory
[Affected Scope] Microsoft Windows operating systems and applications utilizing the Windows Graphics Device Interface (GDI+) library
[Impact] Successful exploitation allows remote attackers to execute arbitrary code and gain full system control via specially crafted media files
[Mitigation] Apply the official Microsoft security updates immediately and restrict the execution of untrusted media files
Microsoft Windows GDI Component Remote Code Execution Vulnerability (CVE-2016-3393, MS16-120)
[Affected Scope] Legacy Windows operating systems including Windows Vista SP2, 7 SP1, 8.1, 10, and Windows Server 2008, 2012, 2016
[Impact] Remote attackers can execute arbitrary code with the privileges of the current user and compromise the system via crafted websites or documents
[Mitigation] Apply the official Microsoft security updates (MS16-120) immediately and restrict access to untrusted websites on unpatched systems
Microsoft Windows GDI+ and Office TIFF Image Processing Remote Code Execution Vulnerability (CVE-2013-3906)
[Affected Scope] Windows Vista SP2, Server 2008 SP2, Office 2003/2007/2010, Lync 2010/2013
[Impact] Remote attackers can execute arbitrary code via a specially crafted TIFF image embedded in documents or emails
[Mitigation] Apply the MS13-096 security patch or implement registry workarounds to disable TIFF rendering in GDI+