CVE-2017-8473
MEDIUM 5.0EPSS 3.6%
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allow an authenticated attacker to run a specially crafted application when the Windows kernel improperly initializes objects in memory, aka "Win32k Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8470, CVE-2017-8471, CVE-2017-8472, CVE-2017-8475, CVE-2017-8477, and CVE-2017-8484.
- Affected
- Microsoft Corporation · Microsoft Windows
- CVSS v3.0 NVD
- 5.0 MEDIUM
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N - CVSS v2.0 NVD
- 1.9 LOW
AV:L/AC:M/Au:N/C:P/I:N/A:N - EPSS
- 3.59% chance of exploitation in the next 30 days, 89th percentile
- Published
- 2017-06-15
- Updated
- 2024-08-05
ExploitDB entries (1)
Security advisories
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8473
- http://www.securityfocus.com/bid/98852
- http://www.securitytracker.com/id/1038659