CVE-2013-3906VulnerabilityPublished 02/15/2022Updated 10/24/2026

CVE-2013-3906: Microsoft Graphics Component Memory Corruption Vulnerability

Affects Microsoft Graphics ComponentSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 02/15/2022
KEV deadline: 08/15/2022
EPSS: 84.9% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2013-3906 (opens in a new tab)

Description

CVE-2013-3906 is a memory corruption vulnerability in the Microsoft Graphics Component that can allow remote code execution. It has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

Summary

The Microsoft Graphics Component contains a memory corruption vulnerability identified as CVE-2013-3906. This vulnerability can be exploited remotely to execute arbitrary code. The vulnerability is classified under CWE-94 (Improper Control of Generation of Code). It has been reported as exploited in the wild, indicating active threat activity. No detailed version or patch information is provided in the input data.

Impact

Successful exploitation of this vulnerability can lead to remote code execution on affected systems, potentially allowing attackers to take control of the impacted machine. The presence of known exploits in the wild increases the risk to vulnerable systems.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Microsoft security advisories for updates and apply any available patches promptly once released.

Weaknesses

CWE-94Code Injection (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 10:11:31 UTC

Weaknesses

References

Related threats