Security services, software licences and managed support from one accountable partner.

← All vulnerabilities

Not yet scored Actively exploited

CVE-2019-0903

Microsoft GDI Remote Code Execution Vulnerability

Description

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system.

Recommended action

Apply updates per vendor instructions.

CISA remediation due date for U.S. federal agencies: 15 Apr 2022.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.