ZDI-26-185
LOW 3.3
Published
Mar 10, 2026
Microsoft Windows GDI Bitmap Parsing Out-Of-Bound Read Information Disclosure Vulnerability
Microsoft
This vulnerability in Microsoft Windows GDI library allows remote attackers to access sensitive information without requiring user authentication. The low CVSS score of 3.3 reflects limited impact, though the exact attack vector depends on how the GDI library is implemented in specific Windows installations. Security teams should monitor for patches from Microsoft and prioritize this fix for systems where the GDI library is heavily utilized or exposed to untrusted networks, though it does not pose an immediate critical threat.