CVE-2019-0853

CVE-2019-0853 is a remote code execution vulnerability in the Windows Graphics Device Interface (GDI+) affecting multiple Windows versions, including Windows 7, 8.1, 10, and various Windows Server editions. This high-severity flaw (CVSS 8.8) allows an unauthenticated attacker to execute arbitrary code on a vulnerable system if a user is tricked into opening a specially crafted file or visiting a malicious website. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered community discussion and media coverage, indicating awareness. Its FAUCET Risk Score of 96/100 suggests a significant potential impact despite the lack of current exploitation intelligence.