ZDI-26-185 LOW 3.3 Published Mar 10, 2026

Microsoft Windows GDI Bitmap Parsing Out-Of-Bound Read Information Disclosure Vulnerability

Microsoft

This vulnerability in Microsoft Windows GDI library allows remote attackers to access sensitive information without requiring user authentication. The low CVSS score of 3.3 reflects limited impact, though the exact attack vector depends on how the GDI library is implemented in specific Windows installations. Security teams should monitor for patches from Microsoft and prioritize this fix for systems where the GDI library is heavily utilized or exposed to untrusted networks, though it does not pose an immediate critical threat.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy