CVE-2017-8472
MEDIUMMicrosoft Windows 7 - Information Disclosure
Title source: ruleDescription
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 allow an authenticated attacker to run a specially crafted application when the Windows kernel improperly initializes objects in memory, aka "Win32k Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8470, CVE-2017-8471, CVE-2017-8473, CVE-2017-8475, CVE-2017-8477, and CVE-2017-8484.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Google Security Research · c++doswindows
https://www.exploit-db.com/exploits/42225
Scores
CVSS v3
5.0
EPSS
0.1573
EPSS Percentile
94.6%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (6)
microsoft/windows_7
microsoft/windows_server_2008
microsoft/windows_server_2008
microsoft/windows_server_2008
microsoft/windows_server_2012
Microsoft Corporation/Microsoft Windows
< Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012.
Published
Jun 15, 2017
Tracked Since
Feb 18, 2026