There was also the Windows Metafile mayhem [0].

[0]: https://en.wikipedia.org/wiki/Windows_Metafile_vulnerability