CVE-2006-5586

no score yetEPSS 3.0%

The Graphics Rendering Engine in Microsoft Windows 2000 SP4 and XP SP2 allows local users to gain privileges via "invalid application window sizes" in layered application windows, aka the "GDI Invalid Window Size Elevation of Privilege Vulnerability."

EPSS: 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
Published: 2007-04-04
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_2000
microsoft:windows_xp

References

http://www.securityfocus.com/archive/1/466186/100/200/threaded
http://www.securityfocus.com/bid/23277
http://www.securitytracker.com/id?1017846
http://www.vupen.com/english/advisories/2007/1215
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-017

Check your stack JSON