CVE-2019-0903: Microsoft GDI Remote Code Execution Vulnerability
CVE-2019-0903 · Severity: critical · CVSS 8.8 · Exploited in the wild · Published 2022-03-25
A remote code execution vulnerability exists in the Windows Graphics Device Interface (GDI) due to improper handling of objects in memory. An attacker could exploit this to take full control of an affected system, typically requiring a user to open a specially crafted file or visit a malicious website.
Yes. CVE-2019-0903 is known to be exploited in the wild, first recorded on 25 March 2022. Treat it as urgent.
How severe is CVE-2019-0903?
Critical severity, with a CVSS score of 8.8, published 25 March 2022.
Which products and versions are affected?
Microsoft Windows 7 Service Pack 1; Microsoft Windows 8.1 -; Microsoft Windows RT 8.1 -; Microsoft Windows 10 1507, 1607, 1703, 1709, 1803, 1809, 1903; and 4 more.
Is there a fix for CVE-2019-0903?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2019-0903 attacked?
It is attacked over the network, in an operating system.
Am I affected by CVE-2019-0903?
Check whether you run Microsoft Graphics Device Interface (GDI). Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Affected products
Microsoft Windows 7 Service Pack 1
Microsoft Windows 8.1 -
Microsoft Windows RT 8.1 -
Microsoft Windows 10 1507, 1607, 1703, 1709, 1803, 1809, 1903
Microsoft Windows Server 2008 Service Pack 2, R2 Service Pack 1
Microsoft Windows Server 2012 -, R2
Microsoft Windows Server 2016 -, 1803, 1903
Microsoft Windows Server 2019 -
Timeline
2019-05-16: disclosed: Initial analysis by NIST
2022-03-25: kev added: Added to CISA Known Exploited Vulnerabilities Catalog