CVE-2019-0903

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system.

CISA Known Exploited Vulnerability

Vendor / Product Microsoft — Graphics Device Interface (GDI)
Date Added 2022-03-25
Remediation Due 2022-04-15
https://nvd.nist.gov/vuln/detail/CVE-2019-0903

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

kev ref →