Severity
High
Analysis Summary
CVE-2021-1665
Microsoft Windows could allow a local authenticated attacker to execute arbitrary code on the system, caused by a flaw in the GDI+ component. By executing a specially-crafted program, an attacker could exploit this vulnerability to execute arbitrary code on the system with privileges of the victim.
Impact
Remote Code Execution
Affected Vendors
Microsoft
Remediation
Refer to vendor advisory for the complete list of affected list products and their respective patches.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1665