CVE Catalog
CVE-2022-41098
MediumCVSS 5.5Exploitation Probability (EPSS)
Elevated risk0.72%
51th percentile - higher than 51% of all known CVEs
Summary
A vulnerability in Windows GDI+ allows information disclosure. An attacker could exploit this flaw to access sensitive data.
Risk Assessment
The risk is the potential leakage of sensitive information, which could compromise the confidentiality of organizational data.
Recommendation
It is recommended to apply Windows security updates to eliminate this vulnerability.
Original NVD description (English source)
Windows GDI+ Information Disclosure Vulnerability

