CVE Catalog

CVE-2022-41098

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.72%

51th percentile - higher than 51% of all known CVEs

Summary

A vulnerability in Windows GDI+ allows information disclosure. An attacker could exploit this flaw to access sensitive data.

Risk Assessment

The risk is the potential leakage of sensitive information, which could compromise the confidentiality of organizational data.

Recommendation

It is recommended to apply Windows security updates to eliminate this vulnerability.

Original NVD description (English source)

Windows GDI+ Information Disclosure Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS