CVE-2016-3356

—

CVSS 3.0

7.8 high

EPSS

19%p97

Published

Sep 14, 2016 (Sep 14, 2016)

Modified

Jun 17, 2026

Description

The Graphics Device Interface (GDI) in Microsoft Windows 10 1607 allows remote attackers to execute arbitrary code via a crafted document, aka "GDI Remote Code Execution Vulnerability."

Vendors: microsoft
Products: windows 10
Weakness: CWE-119
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (19.1%)

In the news1 stories

Microsoft Patch Tuesday

Cisco TalosSep 14, 00:01 UTC · Sep 14, 2016Vulnerability CVE-2016-3295 CVE-2016-3356 CVE-2016-3357