CVE-2020-0964

High · 8.8

CVSS

8.8

EPSS

18.5%

Published

Apr 15, 2020

CISA due date

—

The record

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.

Affected packages

Ecosystem	Package	Introduced	Fixed