CVE-2016-7272

High

Published: 20/12/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The graphics component in Windows allows remote attackers to execute arbitrary code via a crafted website. This affects multiple versions of Windows, including Vista, 7, 8.1, 10, and Windows Server.

Risk Assessment

Attackers can exploit this vulnerability to gain control over the system, potentially leading to data loss or system compromise. Organizations should be aware of the risks associated with visiting unknown websites.

Recommendation

It is recommended to update operating systems to the latest versions and implement security measures such as firewalls and antivirus software to minimize the risk of attack.

Other vulnerabilities in Komponent graficzny systemu Windows

CVE-2015-2364High
The graphics component in Microsoft Windows, including Windows Server 2003, Vista, 7, 8, 8.1, and Server 2012, contains a vulnerability that allows local users to gain elevated privileges via a crafted application leveraging an incorrect bitmap conversion.

Original NVD description (English source)

The Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Graphics Remote Code Execution Vulnerability."