High · published February 15, 2023
CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 92.8th percentile for exploit probability.
🚨 This Windows Graphics Component vulnerability lets attackers execute code remotely with a single malicious image! 💥 Think of it like a restaurant where the chef is actually following a recipe left by a rogue diner — once the order is in, they whip up something dangerous without realizing it. 🍽️ If exploited, an attacker could gain full control over the affected system, leading to unauthorized data access, malware installation, or even complete system compromise. This could be absolutely devastating for individuals and organizations alike! ⚡️
Think of it like a restaurant where the chef is actually following a recipe left by a rogue diner — once the order is in, they whip up something dangerous without realizing it. 🍽️ The flaw lies in the way the Windows Graphics Component processes certain image files, allowing remote code execution via specially crafted images. This means an attacker can manipulate the graphics processing to run any code they choose.
If exploited, an attacker could gain full control over the affected system, leading to unauthorized data access, malware installation, or even complete system compromise. This could be absolutely devastating for individuals and organizations alike! ⚡️ To mitigate this risk, ensure your systems are patched to the latest security updates from Microsoft. Regularly review and tighten your network defenses to block untrusted image files and monitor for unusual activity! 🔒 You've got this! Stay proactive, patch those systems, and you'll be a security hero in no time! 🦸
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1507 | < 10.0.10240.19747 | 10.0.10240.19747 |
| microsoft/windows_10_1507 | < 10.0.10240.19747 | 10.0.10240.19747 |
| microsoft/windows_10_1607 | < 10.0.14393.5717 | 10.0.14393.5717 |
| microsoft/windows_10_1607 | < 10.0.14393.5717 | 10.0.14393.5717 |
| microsoft/windows_10_1809 | < 10.0.17763.4010 | 10.0.17763.4010 |
| microsoft/windows_10_1809 | < 10.0.17763.4010 | 10.0.17763.4010 |
| microsoft/windows_10_1809 | < 10.0.17763.4010 | 10.0.17763.4010 |
| microsoft/windows_10_20h2 | < 10.0.19042.2604 | 10.0.19042.2604 |
| microsoft/windows_10_20h2 | < 10.0.19042.2604 | 10.0.19042.2604 |
| microsoft/windows_10_20h2 | < 10.0.19042.2604 | 10.0.19042.2604 |
| microsoft/windows_10_21h2 | < 10.0.19044.2604 | 10.0.19044.2604 |
| microsoft/windows_10_21h2 | < 10.0.19044.2604 | 10.0.19044.2604 |
| microsoft/windows_10_21h2 | < 10.0.19044.2604 | 10.0.19044.2604 |
| microsoft/windows_10_22h2 | < 10.0.19045.2604 | 10.0.19045.2604 |
| microsoft/windows_10_22h2 | < 10.0.19045.2604 | 10.0.19045.2604 |
| microsoft/windows_10_22h2 | < 10.0.19045.2604 | 10.0.19045.2604 |
| microsoft/windows_11_21h2 | < 10.0.22000.1574 | 10.0.22000.1574 |
| microsoft/windows_11_21h2 | < 10.0.22000.1574 | 10.0.22000.1574 |
| microsoft/windows_11_22h2 | < 10.0.22621.1265 | 10.0.22621.1265 |
| microsoft/windows_11_22h2 | < 10.0.22621.1265 | 10.0.22621.1265 |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2016 | all versions | — |
| microsoft/windows_server_2019 | all versions | — |
| microsoft/windows_server_2022 | all versions | — |