CVE-2016-3393

KEV

Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability

Vendor / Project: Microsoft
Product: Windows
Date added: May 25, 2022
Due date: Jun 15, 2022
Known ransomware use: Unknown
CWEs: CWE-284

Description

A remote code execution vulnerability exists due to the way the Windows GDI component handles objects in the memory. An attacker who successfully exploits this vulnerability could take control of the affected system.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2016-3393