Exploited Vulnerabilities DailyCVE-2017-0001: Microsoft Graphics Device Interface (GDI)
EPSS3.1%No. 1512 of 1739 in KEV
CVE year2017~5 yrs before listing
Same vendor in KEV389
Same product2
| Field | Value |
|---|---|
| Vendor | Microsoft |
| Product | Graphics Device Interface (GDI) |
| Name | Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability |
| Added to KEV | 2022-03-03 |
| US federal due date | 2022-03-24 |
| Ransomware use | Unknown |
| CWE | – |
CISA description
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2019-0903 | Microsoft Graphics Device Interface (GDI) | 2022-03-25 | 21.7% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Microsoft Graphics Device Interface (GDI) vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2022-03-03.