CVE-2016-3393

No fix known ExploitedEPSS 68%CVSS 7.8

Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Graphics Component RCE Vulnerability."

Published 2016-10-14 · In CISA KEV since 2022-05-25 · CVE record · OSV

Products: microsoft windows_10_1507, microsoft windows_10_1511, microsoft windows_10_1607, microsoft windows_7, microsoft windows_8.1, microsoft windows_rt_8.1, microsoft windows_server_2008, microsoft windows_server_2012, microsoft windows_vista