CVE-2017-0058 A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability cou...
MediumCVSS 4.7
EPSS 3.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, aka "Win32k Information Disclosure Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 10 | All versions | No fix listed |
| Microsoft windows 10 | = 1511 | No fix listed |
| Microsoft windows 10 | = 1607 | No fix listed |
| Microsoft windows 10 | = 1703 | No fix listed |
| Microsoft windows 7 | All versions | No fix listed |
| Microsoft windows 8.1 | All versions | No fix listed |
| Microsoft windows rt 8.1 | All versions | No fix listed |
| Microsoft windows server 2008 | All versions | No fix listed |
| Microsoft windows server 2008 | = r2-sp1 | No fix listed |
| Microsoft Windows Server 2012 | All versions | No fix listed |
| Microsoft Windows Server 2012 | = r2 | No fix listed |
| Microsoft Windows Server 2016 | All versions | No fix listed |
| Microsoft windows vista | All versions | No fix listed |
| Microsoft windows | = Windows | No fix listed |
References
- 97462 third-party-advisory vdb-entry
- 1038239 vdb-entry
- portal.msrc.microsoft.com patch vendor-advisory
- 41879 exploit