CVE-2022-21915: Windows GDI+ Information Disclosure Vulnerability
First published: Tue Jan 11 2022(Updated: )
Windows GDI+ Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-21880.
Credit: secure@microsoft.com secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | =20h2 | |
| Microsoft Windows 10 | =20h2 | |
| Microsoft Windows 10 | =20h2 | |
| Microsoft Windows 10 | =21h1 | |
| Microsoft Windows 10 | =21h1 | |
| Microsoft Windows 10 | =21h1 | |
| Microsoft Windows 10 | =21h2 | |
| Microsoft Windows 10 | =21h2 | |
| Microsoft Windows 10 | =21h2 | |
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 10 | =1909 | |
| Microsoft Windows 10 | =1909 | |
| Microsoft Windows 10 | =1909 | |
| Microsoft Windows 11 | ||
| Microsoft Windows 11 | ||
| Microsoft Windows 7 | =sp1 | |
| Microsoft Windows 7 | =sp1 | |
| Microsoft Windows 8.1 | ||
| Microsoft Windows 8.1 | ||
| Microsoft Windows RT 8.1 | ||
| Microsoft Windows Server | =20h2 | |
| Microsoft Windows Server | =2022 | |
| Microsoft Windows Server 2008 | =sp2 | |
| Microsoft Windows Server 2008 | =sp2 | |
| Microsoft Windows Server 2008 | =r2-sp1 | |
| Microsoft Windows Server 2012 | ||
| Microsoft Windows Server 2012 | =r2 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Server 2019 | ||
| Microsoft Windows 10 | =1909 | |
| Microsoft Windows Server 2012 | ||
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows 10 | =1909 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | =20H2 | |
| Microsoft Windows 10 | =21H2 | |
| Microsoft Windows 10 | ||
| Microsoft Windows 7 | ||
| Microsoft Windows 11 | =21H2 | |
| Microsoft Windows Server 2012 R2 | ||
| Microsoft Windows 10 | =21H2 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows 10 | =20H2 | |
| Microsoft Windows Server 2008 R2 | ||
| Microsoft Windows Server 2008 | ||
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows Server 2008 | ||
| Microsoft Windows 10 | =21H1 | |
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows RT 8.1 | ||
| Microsoft Windows Server 2008 | ||
| Microsoft Windows 8.1 for x64-based systems | ||
| Microsoft Windows 10 | =21H1 | |
| Microsoft Windows Server 2019 | ||
| Microsoft Windows 7 | ||
| Microsoft Windows 11 | =21H2 | |
| Microsoft Windows 10 | =21H2 | |
| Microsoft Windows 10 | =21H1 | |
| Microsoft Windows 10 | =1909 | |
| Microsoft Windows Server 2022 | ||
| Microsoft Windows Server 2012 R2 | ||
| Microsoft Windows Server 2012 | ||
| Microsoft Windows 8.1 for 32-bit systems | ||
| Microsoft Windows Server 2022 | ||
| Microsoft Windows Server | =20H2 | |
| Microsoft Windows Server 2008 R2 | ||
| Microsoft Windows Server 2008 | ||
| Microsoft Windows Server 2019 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-21915?
CVE-2022-21915 is a Windows GDI+ Information Disclosure Vulnerability.
How does CVE-2022-21915 affect Microsoft Windows?
CVE-2022-21915 affects Microsoft Windows 10 versions 1607, 1809, 1909, 20h2, 21h1, and 21h2, as well as Windows 7, 8.1, 11, and various Windows Server versions.
What is the severity of CVE-2022-21915?
The severity of CVE-2022-21915 is medium with a CVSS score of 6.5.
How can I fix CVE-2022-21915?
To fix CVE-2022-21915, apply the necessary security updates provided by Microsoft.
Where can I find more information about CVE-2022-21915?
You can find more information about CVE-2022-21915 on the Microsoft Security Response Center website.
- agent/author
- agent/type
- agent/description
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/title
- agent/remedy
- collector/mitre-cve
- source/MITRE
- collector/msrc-cve
- source/Microsoft
- agent/references
- agent/severity
- agent/last-modified-date
- agent/first-publish-date
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/tags
- agent/event
- collector/nvd-api
- source/NVD
- vendor/microsoft
- canonical/microsoft windows 10
- version/microsoft windows 10/20h2
- version/microsoft windows 10/21h1
- version/microsoft windows 10/21h2
- version/microsoft windows 10/1607
- version/microsoft windows 10/1809
- version/microsoft windows 10/1909
- canonical/microsoft windows 11
- canonical/microsoft windows 7
- version/microsoft windows 7/sp1
- canonical/microsoft windows 8.1
- canonical/microsoft windows rt 8.1
- canonical/microsoft windows server
- version/microsoft windows server/20h2
- version/microsoft windows server/2022
- canonical/microsoft windows server 2008
- version/microsoft windows server 2008/sp2
- version/microsoft windows server 2008/r2-sp1
- canonical/microsoft windows server 2012
- version/microsoft windows server 2012/r2
- canonical/microsoft windows server 2016
- canonical/microsoft windows server 2019
- version/microsoft windows 11/21h2
- canonical/microsoft windows server 2012 r2
- canonical/microsoft windows server 2008 r2
- canonical/microsoft windows 8.1 for x64-based systems
- canonical/microsoft windows server 2022
- canonical/microsoft windows 8.1 for 32-bit systems