CVE-2022-35837

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 2, 2025

Last Seen

November 3, 2025

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Windows GDI Vulnerabilities Enable Remote Code Execution and Data Exposure43.1

Three vulnerabilities in the Windows Graphics Device Interface (GDI) have been identified, allowing remote code execution (RCE) and information disclosure. Discovered by Check Point Research, these flaws involve malformed Enhanced Metafile (EMF) records and were patched by Microsoft in multiple upda...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Windows GDI Vulnerabilities Enable Remote Code Execution and Data Exposure

Nov 3·4 sources

Related Entities

Phishing Ransomware Supply Chain Attack Data Breach Check Point Windows Android MacOS Microsoft Word Redis Conti

CVE-2022-35837

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Windows GDI Vulnerabilities Enable Remote Code Execution and Data Exposure

Related Articles (3)

Windows GDI Flaws Expose Systems to Critical Threats, Including RCE and Data Leaks

Windows Graphics Vulnerabilities Allow Remote Attackers to Execute Arbitrary Code

Drawn to Danger: Windows Graphics Vulnerabilities Lead to Remote Code Execution and ...

Related Entities