CVE-2017-0001
Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability
Published Mar 16, 2017 · updated Jun 16, 2026 · microsoft windows 10 1507
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka "Windows GDI Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0005, CVE-2017-0025, and CVE-2017-0047.
Timeline
Detection, updates, and resolution for this record.
Mar 16, 2017 · Catalog
Detected
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka "Windows GDI Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-20
Mar 3, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Mar 24, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka "Windows GDI Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-20
Required action
Apply updates per vendor instructions.
CISA due date Mar 24, 2022
Affected
- cpe microsoft/windows 10 1507version unspecified
- cpe microsoft/windows 10 1511version unspecified
- cpe microsoft/windows 10 1607version unspecified
- cpe microsoft/windows 7version unspecified
- cpe microsoft/windows 8.1version unspecified
- vendor Microsoft Graphics Device Interface (GDI)version unspecified
Sources
- CISA KEVConfirmed exploitationCVE-2017-0001
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges
cisa.gov - CVE.orgVulnerability recordCVE-2017-0001
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2017-0001
30-day exploitation probability 3.1%
first.org - NIST NVDVulnerability recordCVE-2017-0001
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application
nvd.nist.gov