PULSE
LIVE0signals / 24h
ES
FEED
vulnKEV agrega CVE-2023-49105 — ownCloud / ownCloudvulnKEV agrega CVE-2026-53362 — Linux / KernelvulnKEV agrega CVE-2026-66384 — JFrog / ArtifactoryvulnKEV agrega CVE-2021-23758 — Ajax.NET Professional / Ajax.NET ProfessionalvulnKEV agrega CVE-2015-3246 — Red Hat / LibuservulnKEV agrega CVE-2015-5287 — Red Hat / Automatic Bug Reporting ToolvulnKEV agrega CVE-2022-0995 — Linux / KernelvulnKEV agrega CVE-2026-8452 — Citrix / NetScaler ADC and NetScaler GatewayvulnKEV agrega CVE-2019-1068 — Microsoft / SQL ServervulnKEV agrega CVE-2026-60004 — Gitea / GiteavulnKEV agrega CVE-2026-21962 — Oracle / HTTP Server and Oracle Weblogic Server Proxy Plug-invulnKEV agrega CVE-2026-73570 — Synacor / Zimbra Collaboration Suite (ZCS)vulnKEV agrega CVE-2026-72530 — TrueConf / ServervulnKEV agrega CVE-2026-72529 — TrueConf / ServervulnKEV agrega CVE-2023-49105 — ownCloud / ownCloudvulnKEV agrega CVE-2026-53362 — Linux / KernelvulnKEV agrega CVE-2026-66384 — JFrog / ArtifactoryvulnKEV agrega CVE-2021-23758 — Ajax.NET Professional / Ajax.NET ProfessionalvulnKEV agrega CVE-2015-3246 — Red Hat / LibuservulnKEV agrega CVE-2015-5287 — Red Hat / Automatic Bug Reporting ToolvulnKEV agrega CVE-2022-0995 — Linux / KernelvulnKEV agrega CVE-2026-8452 — Citrix / NetScaler ADC and NetScaler GatewayvulnKEV agrega CVE-2019-1068 — Microsoft / SQL ServervulnKEV agrega CVE-2026-60004 — Gitea / GiteavulnKEV agrega CVE-2026-21962 — Oracle / HTTP Server and Oracle Weblogic Server Proxy Plug-invulnKEV agrega CVE-2026-73570 — Synacor / Zimbra Collaboration Suite (ZCS)vulnKEV agrega CVE-2026-72530 — TrueConf / ServervulnKEV agrega CVE-2026-72529 — TrueConf / Server
← All CVEs
CVE Watch—

CVE-2017-0005

Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability

CVSS

—

No CVSS

EPSS

10.9%

p96

KEV

YES

May 24, 2022

Exploit Today

79

0-100

Published: — · Last modified: —

EPSS · 30d
10.9%EPSS · 30 days11.0%
2026-08-032026-08-31
KEV catalog record

Product

Microsoft / Windows

Vulnerability

Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability

Added to KEV

May 24, 2022

Remediate by

Jun 14, 2022

Known ransomware use

No

Summary description

The Graphics Device Interface (GDI) in Microsoft Windows allows local users to gain privileges via a crafted application.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2017-0005

Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-322024.3 MED
99.2%
KEV—80Microsoft Windows Protection Mechanism Failure Vulnerability18dCVE-2026-208055.5 MED
91.8%
KEV—78Microsoft Windows Information Disclosure Vulnerability33dCVE-2025-266337.0 HIG
98.1%
KEV—79Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability27dCVE-2024-490398.8 HIG
96.3%
KEV—79Microsoft Windows Task Scheduler Privilege Escalation Vulnerability28dCVE-2024-434618.8 HIG
98.9%
KEV—80Microsoft Windows MSHTML Platform Spoofing Vulnerability22dCVE-2024-382175.4 MED
95.3%
KEV—79Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability22d