CVE-2020-1248

High · 8.8

CVSS

8.8

EPSS

13.7%

Published

Jun 9, 2020

CISA due date

—

The record

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.

Affected packages

Ecosystem	Package	Introduced	Fixed