VYPR
← All advisories
High severity8.8CISA KEVNVD Advisory· Published May 16, 2019· Updated Jun 17, 2026

CVE-2019-0903

CVE-2019-0903

Description

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.

Affected products

37
  • Microsoft/Windows 10 19092 versions
    cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x64:*+ 1 more
    • cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x86:*
  • Microsoft/Windows 10 16072 versions
    cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*+ 1 more
    • cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*
  • Microsoft/Windows 10 15112 versions
    cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x64:*+ 1 more
    • cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x86:*
  • Microsoft/Windows 10 17093 versions
    cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:arm64:*+ 2 more
    • cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:arm64:*
    • cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x86:*
  • Microsoft/Windows 10 18033 versions
    cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:arm64:*+ 2 more
    • cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:arm64:*
    • cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x86:*
  • Microsoft/Windows 10 18093 versions
    cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*+ 2 more
    • cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*
    • cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*
  • Microsoft/Windows 10 19033 versions
    cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:arm64:*+ 2 more
    • cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:arm64:*
    • cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x86:*
  • Microsoft/Windows 7
    cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
  • Microsoft/Windows 8.1
    cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
  • Microsoft/Windows Rt 8.1
    cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*
  • Microsoft/Windows Server 1803
    cpe:2.3:o:microsoft:windows_server_1803:-:*:*:*:*:*:x64:*
  • Microsoft/Windows Server 1903
    cpe:2.3:o:microsoft:windows_server_1903:-:*:*:*:*:*:x64:*
  • Microsoft/Windows Server 20083 versions
    cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*
    • cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
  • Microsoft/Windows Server 20122 versions
    cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
  • Microsoft/Windows Server 2016
    cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
  • Microsoft/Windows Server 2019
    cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
  • Microsoft/Windows Graphics Device Interfacellm-fuzzy
  • Microsoft/Windows 10 Version 1903 for 32-bit Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1903 for ARM64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1903 for x64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows Server 2003cpe-rescue
    Range: 2008 R2 for x64-based Systems Service Pack 1 (Core installation)
  • Microsoft/Windows Server, version 1903 (Server Core installation)v5
    Range: unspecified
  • Microsoft/Windowsv5
    Range: 7 for 32-bit Systems Service Pack 1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.