An attacker could execute arbitrary code in the context of the current user. (CVE-2020-1567) - An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory.