CVE-2017-0005: Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability

EPSS trend

Probability

11.02%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 11.02% on 18-09-2026

18-09-202618-10-2026

EPSS score

11.02%

Known exploited

Compare KEV catalogs

CISA KEVListed

Added: 24-05-2022
Federal due date: 14-06-2022

CISA required action

Apply updates per vendor instructions. nvd.nist.gov/vuln/detail/CVE-2017-0005

Public exploits

1 found

referenceUnverified
Exploit Reference (blogs.technet.microsoft.com)
Maturity: unknown

References

5 links

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0005X Refsource CONFIRMPatchVendor Advisory
www.securityfocus.com/bid/96033VDB EntryX Refsource BIDBroken LinkThird Party Advisory
www.securitytracker.com/id/1038002VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory
blogs.technet.microsoft.com/mmpc/…X Refsource CONFIRMExploitMitigationPatchVendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0005Government ResourceUS Government Resource

Related vulnerabilities

CVE-2018-0750microsoft corporationwindows gdi++21.70%8y ago04-01-2018 14:00The Windows GDI component in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Windows Elevation of Privilege Vulnerability".CVE-2016-0167microsoftwindows_10_1507+7KEVRansomware5.68%10y ago12-04-2016 23:00The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0143 and CVE-2016-0165.CVE-2016-0151microsoftwindows_10_1507+4KEVRansomware62.94%10y ago12-04-2016 23:00The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka "Windows CSRSS Security Feature Bypass Vulnerability."CVE-2016-0099microsoftwindows_10_1507+6KEVRansomware37.05%10y ago09-03-2016 11:00The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 does not properly process request handles, which allows local users to gain privileges via a crafted application, aka "Secondary Logon Elevation of Privilege Vulnerability."CVE-2016-7256microsoftwindows_10_1507+9KEV64.59%9y ago10-11-2016 06:16atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Open Type Font Remote Code Execution Vulnerability."CVE-2016-7255microsoftwindows_10_1507+9KEVRansomware80.97%9y ago10-11-2016 06:16The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

All vulnerabilities inwindows gdi+windows_10_1507 windows_10_1511 windows_10_1607 windows_7

CVE-2017-0005: Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References