CVE-2017-8693

MEDIUM

Microsoft Graphics Component - Information Disclosure via Memory Object Handling

Title source: llm

Description

The Microsoft Graphics Component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability in the way it handles objects in memory, aka "Microsoft Graphics Information Disclosure Vulnerability".

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1039536

Patch, Vendor Advisory x_refsource_confirm

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8693

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/101096

Scores

CVSS v3 5.5

EPSS 0.0619

EPSS Percentile 91.0%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-200

Status published

Products (6)

microsoft/windows_10

microsoft/windows_10 1511

microsoft/windows_10 1607

microsoft/windows_10 1703

microsoft/windows_server_2016

Microsoft Corporation/Microsoft Graphics Component Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016

Published Oct 13, 2017

Tracked Since Feb 18, 2026