CVE-2013-3906

A memory corruption flaw in Microsoft's Graphics Component allowed remote code execution and was actively exploited in the wild.

This unpatched vulnerability enabled attackers to execute arbitrary code remotely, posing a severe risk to systems relying on Microsoft graphics components. DIB organizations must ensure all Microsoft products are patched against known CVEs to prevent exploitation and maintain compliance with security requirements.

Shame score — The vulnerability remained unpatched long enough to be actively exploited in the wild, demonstrating a failure to address known security flaws promptly.