CVE-2021-28350: Windows GDI+ Remote Code Execution Vulnerability
Published Apr 13, 2021
·Updated
Windows GDI+ Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-28348, CVE-2021-28349.
Affected Software
19 affected components
Microsoft Windows 10
Microsoft Windows 10=20h2
Microsoft Windows 10=1607
Microsoft Windows 10=1803
Microsoft Windows 10=1809
Microsoft Windows 10=1909
Microsoft Windows 10=2004
Microsoft Windows 7=sp1
Microsoft Windows 8.1
Microsoft Windows RT 8.1
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2016=20h2
Microsoft Windows Server 2016=1909
Microsoft Windows Server 2016=2004
Microsoft Windows Server 2019
Remediation
Event History
Apr 13, 2021
CVE Published
07:33 PM
Data Sourced
07:33 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2021-28350?
CVE-2021-28350 has a critical severity rating due to its potential to allow remote code execution.
2
How do I fix CVE-2021-28350?
To fix CVE-2021-28350, users should apply the latest security updates provided by Microsoft for affected Windows versions.
3
Which systems are affected by CVE-2021-28350?
CVE-2021-28350 affects various versions of Windows, including Windows 10, Windows 7, Windows 8.1, and multiple server versions.
4
What types of attacks can exploit CVE-2021-28350?
CVE-2021-28350 can be exploited via specially crafted images that trigger remote code execution on the vulnerable system.
5
Are there any workarounds for CVE-2021-28350?
While applying patches is recommended, temporary workarounds may involve disabling certain features or restricting the use of specific image files until a fix is applied.