Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability

HIGH 7.8EXPLOITED (CISA KEV)CVE-2017-0005 · Published 17/03/2017 · updated 17/06/2026

Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 24/05/2022. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
Windows Microsoft	Versions not published yet (product named by CISA KEV)

Description

The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka "Windows GDI Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0001, CVE-2017-0025, and CVE-2017-0047.

References

securityfocus.com/bid/96033 · Broken Link
securitytracker.com/id/1038002 · Broken Link
blogs.technet.microsoft.com/mmpc/2017/03/27/detecting-and-mitigating-elevation-of-privilege-exploit-for-cve-2017-0005 · Exploit
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0005 · Patch
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2017-0005

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free