Microsoft GDI Remote Code Execution Vulnerability (CVE-2019-0903)
Severity: high · Patch status: patched · Since 2022-03-25 · CVE-2019-0903
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. CISA added CVE-2019-0903 to its Known Exploited Vulnerabilities catalog on Mar 25, 2022, which means attackers are exploiting it in the wild.
What to do
- Apply updates per vendor instructions.
- US federal agencies must remediate by Apr 15, 2022 (BOD 22-01); treat that as the outer limit.
Sources
All live incidents on Threat Watch
