coldbraid

CVE-2017-0005 Microsoft Windows

The Graphics Device Interface (GDI) in Microsoft Windows allows local users to gain privileges via a crafted application.

CVSS
not scored

CWE-119

On CISA’s exploited list

Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability

Added
2022-05-24
Federal patch deadline
2022-06-14
Ransomware use
not known

Actors known to use it (MITRE ATT&CK)