CVE-2019-0903
High · 8.8 CISA KEVCVSS
8.8
EPSS
21.7%
Published
May 16, 2019
CISA due date
Apr 15, 2022
The record
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|