CVE-2019-0903VulnerabilityPublished 03/25/2022Updated 10/24/2026

CVE-2019-0903: Microsoft GDI Remote Code Execution Vulnerability

Affects Microsoft Graphics Device Interface (GDI)Source CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 03/25/2022
KEV deadline: 04/15/2022
EPSS: 21.7% chance of exploitation in 30 days – higher than 97% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2019-0903 (opens in a new tab)

Description

CVE-2019-0903 is a remote code execution vulnerability in the Windows Graphics Device Interface (GDI) that allows an attacker to take control of an affected system by exploiting how GDI handles objects in memory. This vulnerability has been exploited in the wild. It is rated as high severity due to the potential for full system compromise.

Summary

This vulnerability arises from improper handling of objects in memory by the Windows Graphics Device Interface (GDI). Successful exploitation enables remote code execution, allowing attackers to gain control over the affected system. The vulnerability has been observed in active exploitation campaigns.

Impact

An attacker who successfully exploits this vulnerability can execute arbitrary code remotely, potentially gaining full control over the affected Windows system. This can lead to system compromise, data theft, or further network penetration.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 10:57:19 UTC

References

Related threats