CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Windows GDI Privilege Escalation Vulnerability (CVE-2017-0005) Technical Analysis and Mitigation Guide
[Affected Scope] Windows Vista SP2, 7 SP1, 8.1, RT 8.1, 10 (Gold, 1511, 1607), and Windows Server 2008, 2012 families.
[Impact] Local attackers can execute arbitrary code in kernel mode and elevate privileges to SYSTEM via a crafted application.
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict local execution privileges on unpatched systems.
Microsoft Windows GDI Elevation of Privilege Vulnerability (CVE-2017-0001) Security Advisory
[Affected Scope] Windows Vista SP2, 7 SP1, 8.1, RT 8.1, 10 (Gold, 1511, 1607) and Windows Server 2008 SP2/R2 SP1, 2012 Gold/R2.
[Impact] Local attackers can execute arbitrary code in kernel mode and gain SYSTEM privileges via a crafted application.
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict local execution privileges on unpatched systems.
Microsoft Windows GDI Component Remote Code Execution Vulnerability (CVE-2016-3393, MS16-120)
[Affected Scope] Legacy Windows operating systems including Windows Vista SP2, 7 SP1, 8.1, 10, and Windows Server 2008, 2012, 2016
[Impact] Remote attackers can execute arbitrary code with the privileges of the current user and compromise the system via crafted websites or documents
[Mitigation] Apply the official Microsoft security updates (MS16-120) immediately and restrict access to untrusted websites on unpatched systems