coldbraid

CVE-2016-3393 Microsoft Windows

A remote code execution vulnerability exists due to the way the Windows GDI component handles objects in the memory. An attacker who successfully exploits this vulnerability could take control of the affected system.

CVSS
not scored

CWE-284

On CISA’s exploited list

Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability

Added
2022-05-25
Federal patch deadline
2022-06-15
Ransomware use
not known