7.8
High
Exploited
CVE-2017-0001 Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Not observed so far
Description
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka "Windows GDI Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0005, CVE-2017-0025, and CVE-2017-0047.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows GDI | Versions not published |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
- 1038002 www.securitytracker.com
- 96057 www.securityfocus.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified
Other CVEs of Windows GDI
The 5 CVEs of Windows GDI →
CVE-2018-0750
The Windows GDI component in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure…
Not rated
CVE-2017-0047
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1;…
Not rated
CVE-2017-0025
The kernel-mode drivers in Microsoft Windows Vista; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1;…
Not rated
CVE-2017-0005
Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability
7.8
High