Windows GDI Elevation of Privilege Vulnerabilities Patched by Microsoft
Attack Tradecraft · 2 sources · Updated 3mo ago · First seen May 25, 2026
Microsoft published security advisories for multiple Windows GDI Elevation of Privilege flaws, including CVE-2017-0005 and CVE-2022-21903. Both vulnerabilities affect the Windows Graphics Device Interface and could allow an attacker to gain higher privileges on a targeted system if successfully exploited.
The advisories were released through Microsoft's Security Update Guide and MSRC portal, indicating that patches were made available for affected Windows platforms. The issues highlight the recurring security risk posed by privilege-escalation bugs in core Windows graphics components, which can be used by attackers after initial access to move from limited user rights to more powerful system-level control.
