Vendor / Project: Microsoft Product: Windows Description: A remote code execution vulnerability exists due to the way the Windows GDI component handles objects in the memory. An attacker who successfully exploits this vulnerability could take control of the affected system. Required Action: Apply updates per vendor instructions. Due Date: 2022-06-15 Ransomware Campaign Use: Unknown CWEs: CWE-284 Notes: https://nvd.nist.gov/vuln/detail/CVE-2016-3393
CVE-2016-3393 — Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2022-05-25 00:00 UTC
- Importiert: 2026-10-20 22:46 UTC
- CVSS: 7.8
- Quelle-ID:
cisa_kev - uid_hash:
97c76926df35f00898baf2b3b35aa91c86c25931e13c699700a3a422ce4c29a9
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
7.8 |
HIGH |
7.8 |
2016-10-14 |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CISA – Known Exploited Vulnerabilities (KEV) | threat_intel | cisa, kev | - | de | https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json |