{"api_version":"1","generated_at":"2026-06-02T09:42:32+00:00","cve":"CVE-2025-21338","urls":{"html":"https://cve.report/CVE-2025-21338","api":"https://cve.report/api/cve/CVE-2025-21338.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2025-21338","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-21338"},"summary":{"title":"GDI+ Remote Code Execution Vulnerability","description":"GDI+ Remote Code Execution Vulnerability","state":"PUBLISHED","assigner":"microsoft","published_at":"2025-01-14 18:15:59","updated_at":"2026-05-19 18:38:59"},"problem_types":["CWE-190","NVD-CWE-noinfo","CWE-190 CWE-190: Integer Overflow or Wraparound"],"metrics":[{"version":"3.1","source":"secure@microsoft.com","type":"Secondary","score":"7.8","severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"7.8","severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","data":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","version":"3.1"}}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21338","name":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21338","refsource":"secure@microsoft.com","tags":["Patch","Vendor Advisory"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21338","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21338","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Microsoft","product":"Microsoft Office for Android","version":"affected 16.0.1 16.0.18429.20000 custom","platforms":[]},{"source":"CNA","vendor":"Microsoft","product":"Microsoft Office for iOS","version":"affected 2.0.0 2.93.24123014 custom","platforms":[]},{"source":"CNA","vendor":"Microsoft","product":"Microsoft Office for Mac","version":"affected 1.0.0 16.93.25011212 custom","platforms":[]},{"source":"CNA","vendor":"Microsoft","product":"Microsoft Office for Universal","version":"affected 16.0.1 16.0.14326.22175 custom","platforms":[]},{"source":"CNA","vendor":"Microsoft","product":"Microsoft Office LTSC for Mac 2021","version":"affected 16.0.1 16.93.25011212 custom","platforms":[]},{"source":"CNA","vendor":"Microsoft","product":"Microsoft Office LTSC for Mac 2024","version":"affected 16.0.0 16.93.25011212 custom","platforms":[]},{"source":"CNA","vendor":"Microsoft","product":"Windows 10 Version 1507","version":"affected 10.0.10240.0 10.0.10240.20890 custom","platforms":["32-bit Systems","x64-based Systems"]},{"source":"CNA","vendor":"Microsoft","product":"Windows 10 Version 1607","version":"affected 10.0.14393.0 10.0.14393.7699 custom","platforms":["32-bit Systems","x64-based Systems"]},{"source":"CNA","vendor":"Microsoft","product":"Windows 10 Version 1809","version":"affected 10.0.17763.0 10.0.17763.6775 custom","platforms":["32-bit Systems","x64-based Systems"]},{"source":"CNA","vendor":"Microsoft","product":"Windows 10 Version 21H2","version":"affected 10.0.19044.0 10.0.19044.5371 custom","platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"]},{"source":"CNA","vendor":"Microsoft","product":"Windows 10 Version 22H2","version":"affected 10.0.19045.0 10.0.19045.5371 custom","platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"]},{"source":"CNA","vendor":"Microsoft","product":"Windows 11 version 22H2","version":"affected 10.0.22621.0 10.0.22621.4751 custom","platforms":["ARM64-based Systems","x64-based Systems"]},{"source":"CNA","vendor":"Microsoft","product":"Windows 11 version 22H3","version":"affected 10.0.22631.0 10.0.22631.4751 custom","platforms":["ARM64-based Systems"]},{"source":"CNA","vendor":"Microsoft","product":"Windows 11 Version 23H2","version":"affected 10.0.22631.0 10.0.22631.4751 custom","platforms":["x64-based Systems"]},{"source":"CNA","vendor":"Microsoft","product":"Windows 11 Version 24H2","version":"affected 10.0.26100.0 10.0.26100.2894 custom","platforms":["ARM64-based Systems","x64-based Systems"]},{"source":"CNA","vendor":"Microsoft","product":"Windows Server 2008 R2 Service Pack 1","version":"affected 6.1.7601.0 6.1.7601.27520 custom","platforms":["x64-based Systems"]},{"source":"CNA","vendor":"Microsoft","product":"Windows Server 2008 R2 Service Pack 1 (Server Core installation)","version":"affected 6.1.7601.0 6.1.7601.27520 custom","platforms":["x64-based Systems"]},{"source":"CNA","vendor":"Microsoft","product":"Windows Server 2008 Service Pack 2","version":"affected 6.0.6003.0 6.0.6003.23070 custom","platforms":["32-bit Systems","x64-based Systems"]},{"source":"CNA","vendor":"Microsoft","product":"Windows Server 2008 Service Pack 2 (Server Core installation)","version":"affected 6.0.6003.0 6.0.6003.23070 custom","platforms":["32-bit Systems","x64-based Systems"]},{"source":"CNA","vendor":"Microsoft","product":"Windows Server 2012","version":"affected 6.2.9200.0 6.2.9200.25273 custom","platforms":["x64-based Systems"]},{"source":"CNA","vendor":"Microsoft","product":"Windows Server 2012 (Server Core installation)","version":"affected 6.2.9200.0 6.2.9200.25273 custom","platforms":["x64-based Systems"]},{"source":"CNA","vendor":"Microsoft","product":"Windows Server 2012 R2","version":"affected 6.3.9600.0 6.3.9600.22371 custom","platforms":["x64-based Systems"]},{"source":"CNA","vendor":"Microsoft","product":"Windows Server 2012 R2 (Server Core installation)","version":"affected 6.3.9600.0 6.3.9600.22371 custom","platforms":["x64-based Systems"]},{"source":"CNA","vendor":"Microsoft","product":"Windows Server 2016","version":"affected 10.0.14393.0 10.0.14393.7699 custom","platforms":["x64-based Systems"]},{"source":"CNA","vendor":"Microsoft","product":"Windows Server 2016 (Server Core installation)","version":"affected 10.0.14393.0 10.0.14393.7699 custom","platforms":["x64-based Systems"]},{"source":"CNA","vendor":"Microsoft","product":"Windows Server 2019","version":"affected 10.0.17763.0 10.0.17763.6775 custom","platforms":["x64-based Systems"]},{"source":"CNA","vendor":"Microsoft","product":"Windows Server 2019 (Server Core installation)","version":"affected 10.0.17763.0 10.0.17763.6775 custom","platforms":["x64-based Systems"]},{"source":"CNA","vendor":"Microsoft","product":"Windows Server 2022","version":"affected 10.0.20348.0 10.0.20348.3091 custom","platforms":["x64-based Systems"]},{"source":"CNA","vendor":"Microsoft","product":"Windows Server 2022, 23H2 Edition (Server Core installation)","version":"affected 10.0.25398.0 10.0.25398.1369 custom","platforms":["x64-based Systems"]},{"source":"CNA","vendor":"Microsoft","product":"Windows Server 2025","version":"affected 10.0.26100.0 10.0.26100.2894 custom","platforms":["x64-based Systems"]},{"source":"CNA","vendor":"Microsoft","product":"Windows Server 2025 (Server Core installation)","version":"affected 10.0.26100.0 10.0.26100.2894 custom","platforms":["x64-based Systems"]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"office","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"android","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"office","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"iphone_os","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"office","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"macos","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"office","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"universal","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"office","cpe6":"2024","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"ltsc","cpe11":"macos","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"office_long_term_servicing_channel","cpe6":"2021","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"macos","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows_10_1507","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"x64","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows_10_1507","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"x86","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows_10_1607","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"x64","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows_10_1607","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"x86","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows_10_1809","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"x64","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows_10_1809","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"x86","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows_10_21h2","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows_10_22h2","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows_11_22h2","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows_11_23h2","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows_11_24h2","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows_server_2008","cpe6":"-","cpe7":"sp2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows_server_2008","cpe6":"r2","cpe7":"sp1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"x64","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows_server_2012","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows_server_2012","cpe6":"r2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows_server_2016","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows_server_2019","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows_server_2022","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows_server_2022_23h2","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"21338","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows_server_2025","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"x64","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2025","cve_id":"21338","cve":"CVE-2025-21338","epss":"0.005320000","percentile":"0.674780000","score_date":"2026-05-26","updated_at":"2026-05-27 00:01:53"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2025-21338","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2025-01-14T21:14:09.557597Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2025-01-14T21:14:39.790Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"Microsoft Office for Android","vendor":"Microsoft","versions":[{"lessThan":"16.0.18429.20000","status":"affected","version":"16.0.1","versionType":"custom"}]},{"product":"Microsoft Office for iOS","vendor":"Microsoft","versions":[{"lessThan":"2.93.24123014","status":"affected","version":"2.0.0","versionType":"custom"}]},{"product":"Microsoft Office for Mac","vendor":"Microsoft","versions":[{"lessThan":"16.93.25011212","status":"affected","version":"1.0.0","versionType":"custom"}]},{"product":"Microsoft Office for Universal","vendor":"Microsoft","versions":[{"lessThan":"16.0.14326.22175","status":"affected","version":"16.0.1","versionType":"custom"}]},{"product":"Microsoft Office LTSC for Mac 2021","vendor":"Microsoft","versions":[{"lessThan":"16.93.25011212","status":"affected","version":"16.0.1","versionType":"custom"}]},{"product":"Microsoft Office LTSC for Mac 2024","vendor":"Microsoft","versions":[{"lessThan":"16.93.25011212","status":"affected","version":"16.0.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1507","vendor":"Microsoft","versions":[{"lessThan":"10.0.10240.20890","status":"affected","version":"10.0.10240.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1607","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.7699","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.6775","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.5371","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.5371","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22621.4751","status":"affected","version":"10.0.22621.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 22H3","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.4751","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.4751","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.2894","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2008 R2 Service Pack 1","vendor":"Microsoft","versions":[{"lessThan":"6.1.7601.27520","status":"affected","version":"6.1.7601.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2008 R2 Service Pack 1 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"6.1.7601.27520","status":"affected","version":"6.1.7601.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows Server 2008 Service Pack 2","vendor":"Microsoft","versions":[{"lessThan":"6.0.6003.23070","status":"affected","version":"6.0.6003.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows Server 2008 Service Pack 2 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"6.0.6003.23070","status":"affected","version":"6.0.6003.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2012","vendor":"Microsoft","versions":[{"lessThan":"6.2.9200.25273","status":"affected","version":"6.2.9200.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2012 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"6.2.9200.25273","status":"affected","version":"6.2.9200.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2012 R2","vendor":"Microsoft","versions":[{"lessThan":"6.3.9600.22371","status":"affected","version":"6.3.9600.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2012 R2 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"6.3.9600.22371","status":"affected","version":"6.3.9600.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.7699","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.7699","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.6775","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.6775","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.3091","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022, 23H2 Edition (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.25398.1369","status":"affected","version":"10.0.25398.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.2894","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.2894","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*","versionEndExcluding":"10.0.17763.6775","versionStartIncluding":"10.0.17763.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.17763.6775","versionStartIncluding":"10.0.17763.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.17763.6775","versionStartIncluding":"10.0.17763.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.20348.3091","versionStartIncluding":"10.0.20348.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*","versionEndExcluding":"10.0.19044.5371","versionStartIncluding":"10.0.19044.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*","versionEndExcluding":"10.0.22621.4751","versionStartIncluding":"10.0.22621.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*","versionEndExcluding":"10.0.19045.5371","versionStartIncluding":"10.0.19045.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.26100.2894","versionStartIncluding":"10.0.26100.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*","versionEndExcluding":"10.0.22631.4751","versionStartIncluding":"10.0.22631.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*","versionEndExcluding":"10.0.22631.4751","versionStartIncluding":"10.0.22631.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.25398.1369","versionStartIncluding":"10.0.25398.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*","versionEndExcluding":"10.0.26100.2894","versionStartIncluding":"10.0.26100.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.26100.2894","versionStartIncluding":"10.0.26100.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*","versionEndExcluding":"10.0.10240.20890","versionStartIncluding":"10.0.10240.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*","versionEndExcluding":"10.0.14393.7699","versionStartIncluding":"10.0.14393.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.14393.7699","versionStartIncluding":"10.0.14393.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.14393.7699","versionStartIncluding":"10.0.14393.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*","versionEndExcluding":"6.0.6003.23070","versionStartIncluding":"6.0.6003.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*","versionEndExcluding":"6.0.6003.23070","versionStartIncluding":"6.0.6003.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*","versionEndExcluding":"6.1.7601.27520","versionStartIncluding":"6.1.7601.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*","versionEndExcluding":"6.1.7601.27520","versionStartIncluding":"6.1.7601.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*","versionEndExcluding":"6.2.9200.25273","versionStartIncluding":"6.2.9200.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*","versionEndExcluding":"6.2.9200.25273","versionStartIncluding":"6.2.9200.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*","versionEndExcluding":"6.3.9600.22371","versionStartIncluding":"6.3.9600.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*","versionEndExcluding":"6.3.9600.22371","versionStartIncluding":"6.3.9600.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office_macos:*:*:*:*:*:macos:*:*","versionEndExcluding":"16.93.25011212","versionStartIncluding":"1.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*","versionEndExcluding":"16.93.25011212","versionStartIncluding":"16.0.1","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office:*:*:iOS:*:*:*:*:*","versionEndExcluding":"2.93.24123014","versionStartIncluding":"2.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office:*:*:android:*:*:*:*:*","versionEndExcluding":"16.0.18429.20000","versionStartIncluding":"16.0.1","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office:*:*:universal:*:*:*:*:*","versionEndExcluding":"16.0.14326.22175","versionStartIncluding":"16.0.1","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*","versionEndExcluding":"16.93.25011212","versionStartIncluding":"16.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"datePublic":"2025-01-14T08:00:00.000Z","descriptions":[{"lang":"en-US","value":"GDI+ Remote Code Execution Vulnerability"}],"metrics":[{"cvssV3_1":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-190","description":"CWE-190: Integer Overflow or Wraparound","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-02-13T19:56:40.840Z","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft"},"references":[{"name":"GDI+ Remote Code Execution Vulnerability","tags":["vendor-advisory","patch"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21338"}],"title":"GDI+ Remote Code Execution Vulnerability"}},"cveMetadata":{"assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","assignerShortName":"microsoft","cveId":"CVE-2025-21338","datePublished":"2025-01-14T18:04:40.697Z","dateReserved":"2024-12-11T00:29:48.352Z","dateUpdated":"2026-02-13T19:56:40.840Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2025-01-14 18:15:59","lastModifiedDate":"2026-05-19 18:38:59","problem_types":["CWE-190","NVD-CWE-noinfo","CWE-190 CWE-190: Integer Overflow or Wraparound"],"metrics":{"cvssMetricV31":[{"source":"secure@microsoft.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:*:*:*:*:*:iphone_os:*:*","versionEndExcluding":"2.93.24123014","matchCriteriaId":"6D7CCBA8-04D3-42A0-9F08-28A0F9258E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:*:*:*:*:*:universal:*:*","versionEndExcluding":"16.0.14326.22175","matchCriteriaId":"65FB1E96-8B01-430B-9A38-CE9074D71894"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:*:*:*:*:*:android:*:*","versionEndExcluding":"16.0.18429.20000","matchCriteriaId":"B63F2FD7-513A-4C3B-A59D-4F1F7AC4A07D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:*:*:*:*:*:macos:*:*","versionEndExcluding":"16.93.25011212","matchCriteriaId":"0697A94F-0856-4B53-B9B2-6EA6E6A7755C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2024:*:*:*:ltsc:macos:*:*","matchCriteriaId":"873BD998-9D5A-4C09-A3B3-4DB12ABB6F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*","matchCriteriaId":"BF0E8112-5B6F-4E55-8E40-38ADCF6FC654"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*","versionEndExcluding":"10.0.10240.20890","matchCriteriaId":"D5C2C390-24E9-42C9-84BF-EE28670CAB30"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*","versionEndExcluding":"10.0.10240.20890","matchCriteriaId":"C0B9C790-A26D-4EBD-B5CA-F0C628835A21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*","versionEndExcluding":"10.0.14393.7699","matchCriteriaId":"DE0F44E5-40C1-4BE3-BBA4-507564182682"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*","versionEndExcluding":"10.0.14393.7699","matchCriteriaId":"83F40BB6-BBAE-4CD4-A5FE-1DAF690101AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*","versionEndExcluding":"10.0.17763.6775","matchCriteriaId":"1BB028F9-A802-40C7-97BF-1D169291678F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*","versionEndExcluding":"10.0.17763.6775","matchCriteriaId":"9F077951-8177-4FEE-A49A-76E51AE48CE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.19044.5371","matchCriteriaId":"5D64D2C7-51C3-47EB-B86E-75172846F4DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.19045.5371","matchCriteriaId":"BC92CC57-B18C-43C3-8180-9A2108407433"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.22621.4751","matchCriteriaId":"D84EDF98-16E1-412A-9879-2C2FEF87FB2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.22631.4751","matchCriteriaId":"282E3839-E953-4B14-A860-DBACC1E99AFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.26100.2894","matchCriteriaId":"78A3F671-95DC-442A-A511-1E875DF93546"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*","matchCriteriaId":"5F422A8C-2C4E-42C8-B420-E0728037E15C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*","matchCriteriaId":"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","matchCriteriaId":"A7DF96F8-BA6A-4780-9CA3-F719B3F81074"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.14393.7699","matchCriteriaId":"DA4426DD-B748-4CC4-AC68-88AD963E5F0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.17763.6775","matchCriteriaId":"8F604C79-6A12-44C9-B69D-A2E323641079"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.20348.3091","matchCriteriaId":"7B8C9C82-359E-4318-A10D-AA47CDFB38FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.25398.1369","matchCriteriaId":"E3E0C061-2DA7-4237-9607-F6792DC92DD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*","versionEndExcluding":"10.0.26100.2894","matchCriteriaId":"2CFD18D5-3C1F-4E3A-A143-EE3F1FFBB880"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2025","CveId":"21338","Ordinal":"1","Title":"GDI+ Remote Code Execution Vulnerability","CVE":"CVE-2025-21338","Year":"2025"},"notes":[{"CveYear":"2025","CveId":"21338","Ordinal":"1","NoteData":"GDI+ Remote Code Execution Vulnerability","Type":"Description","Title":"GDI+ Remote Code Execution Vulnerability"}]}}}