CVE Catalog

CVE-2021-34440

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.76%

52th percentile - higher than 52% of all known CVEs

Summary

Information disclosure vulnerability in GDI+ on Windows. It may allow an attacker to access data that should be protected.

Risk Assessment

Risk of exposing sensitive data processed by graphics, which could lead to confidentiality breaches.

Recommendation

Install the latest Windows security updates to remediate this vulnerability.

Original NVD description (English source)

GDI+ Information Disclosure Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS