CVE Watch—

CVE-2017-0001

Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability

CVSS

—

No CVSS

EPSS

3.1%

p86

KEV

YES

Mar 3, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

3.1%EPSS · 30 days3.1%

2026-06-302026-07-16

KEV catalog record

Product

Microsoft / Graphics Device Interface (GDI)

Vulnerability

Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability

Added to KEV

Mar 3, 2022

Remediate by

Mar 24, 2022

Known ransomware use

Summary description

The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2017-0001

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2019-0903—

97.4%

KEV—79Microsoft GDI Remote Code Execution Vulnerability—