CVE-2016-0184

High · 8.8

CVSS

8.8

EPSS

18.8%

Published

May 11, 2016

CISA due date

—

The record

Use-after-free vulnerability in GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted document, aka "Direct3D Use After Free Vulnerability."

Affected packages

Ecosystem	Package	Introduced	Fixed