Microsoft Windows/Windows Server Remote Code Execution Vulnerability (CNVD-2021-67491)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation (USA), an operating system for personal devices, and Microsoft Windows Server, a server operating system. A remote code execution vulnerability exists in Microsoft Windows/Windows Server. The vulnerability stems from a problem with the way the Windows Graphical Device Interface (GDI) handles objects in memory, which could be exploited to execute code that allows an attacker to install programs, view, change, or delete data, or create a new account with full user privileges.