CVE-2016-3393
Act now ● On CISA KEV — actively exploited
Actively exploited — on the CISA KEV list.
CVSS base
—
EPSS — probability of exploitation (30 days)
68.5%
99.3th percentile
CISA KEV
Listed
Added 2022-05-25 · patch by 2022-06-15
Weakness / dates
—
Published — · modified —
Timeline
- 2022-05-25 — Added to CISA KEV (actively exploited)
- 2022-06-15 — CISA patch-by deadline
Description
A remote code execution vulnerability exists due to the way the Windows GDI component handles objects in the memory. An attacker who successfully exploits this vulnerability could take control of the affected system.