Skip to content
OpenAdvisories
High MSRC-CVE-2022-21880 1 CVE

Windows GDI+ Information Disclosure Vulnerability

Published Jan 11, 2022 · Updated Jan 14, 2022 · Revision 2

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What type of information could be disclosed by this vulnerability?
The type of information that could be disclosed if an attacker successfully exploited this vulnerability is a pointer leak to the process user-mode address space in the internal memory of the application that is using GDI+.

Security updates
10.0.17763.2452 — https://support.microsoft.com/help/5009557
10.0.18363.2037 — https://support.microsoft.com/help/5009545
10.0.19043.1466 — https://support.microsoft.com/help/5009543
10.0.20348.469 — https://support.microsoft.com/help/5009555
10.0.22000.434 — https://support.microsoft.com/help/5009566
10.0.10240.19177 — https://support.microsoft.com/help/5009585
10.0.14393.4886 — https://support.microsoft.com/help/5009546
6.1.7601.25829 — https://support.microsoft.com/help/5009610
6.1.7601.25829 — https://support.microsoft.com/help/5009621
6.3.9600.20246 — https://support.microsoft.com/help/5009624
6.3.9600.20246 — https://support.microsoft.com/help/5009595
6.0.6003.21349 — https://support.microsoft.com/help/5009627
6.0.6003.21349 — https://support.microsoft.com/help/5009601
6.2.9200.23584 — https://support.microsoft.com/help/5009586
6.2.9200.23584 — https://support.microsoft.com/help/5009619

Vulnerabilities 1

Revision history

  1. #2

    Updated FAQ information. This is an informational change only.

  2. #1

    Information published.

References