CVE-2017-0005: Microsoft Windows Graphics Device Interface (GDI) Privilege

Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability. The Graphics Device Interface (GDI) in Microsoft Windows allows local users to gain privileges via a crafted application.

• CISA KEV-listed (remediation due 2022-06-14)
• EPSS 10.9% (95.6% percentile)
• CVSS 7.8 high

Related briefings

• The Story of Jian: How APT31 Stole and Repurposed an NSA Zero-Day Two Years Before the Shadow Brokers Leak 2026-02-16

Linked threat actors

• ZIRCONIUM machine-inferred link
• Equation Group machine-inferred link

Browse the CVE database

Read the full analysis on IntelFusions