Skip to content
COOEY

EXPOSURES › CVE-2017-0001

CVE-2017-0001

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2022-03-03 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2017-0001 ↗
⌖ EXPLOITED IN THE WILD SHAME 75/100 exploited-in-wildunpatchedprivilege-escalation

A local privilege escalation flaw in Microsoft's GDI allowed attackers to escalate privileges on multiple Windows versions.

This vulnerability allowed local users to gain elevated privileges, which could lead to full system compromise. DIB organizations must ensure all Windows systems are patched, as this flaw was actively exploited in the wild and represents a significant compliance risk under NIST 800-171 for unpatched systems.

Shame score — A known privilege escalation vulnerability in a core Windows component was actively exploited in the wild, indicating a failure to patch a critical system flaw.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges

AFFECTED FEDRAMP PRODUCTS · 4
PRODUCTSTATUS
Azure Commercial Cloud
Microsoft
Authorized
Azure Government (includes Dynamics 365)
Microsoft
Authorized
Microsoft Office 365 GCC High
Microsoft
In Process
Office 365 Multi-Tenant & Supporting Services
Microsoft
Authorized