CVE-2019-0903—Microsoft GDI Remote Code Execution Vulnerability

PUBLISHEDvulnerability record

2022-03-25 · last modified June 21, 2025

Metadata

CVE ID:: CVE-2019-0903
Project:: Microsoft
Product:: Graphics Device Interface (GDI)
Date Added:: 2022-03-25
Due Date:: 2022-04-15
Last Updated:: June 21, 2025

Vulnerability Name

Microsoft GDI Remote Code Execution Vulnerability

Description

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:: Unknown

Action

Apply updates per vendor instructions.

Additional Notes

browse all CVEs