CVE-2008-2160: Microsoft Windows Embedded Compact

High severity, CVSS 9.3. EPSS: 18% chance of exploitation in the next 30 days.

Multiple unspecified vulnerabilities in the JPEG (GDI+) and GIF image processing in Microsoft Windows CE 5.0 allow remote attackers to execute arbitrary code via crafted (1) JPEG and (2) GIF images.

Affected products

• Microsoft Windows Embedded Compact: version 5.0 only

Published 2008-05-12. Last modified 2026-06-16.