CVE-2017-0167 An information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and Windows Server 2016 when the Windows kernel improperly handles objects in memory....
MediumCVSS 5.5
EPSS 5.5%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
An information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and Windows Server 2016 when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user's system, a.k.a. "Windows Kernel Information Disclosure Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 10 | All versions | No fix listed |
| Microsoft windows 10 | = 1511 | No fix listed |
| Microsoft windows 10 | = 1607 | No fix listed |
| Microsoft windows 10 | = 1703 | No fix listed |
| Microsoft windows 8.1 | All versions | No fix listed |
| Microsoft windows rt 8.1 | All versions | No fix listed |
| Microsoft Windows Server 2012 | = r2 | No fix listed |
| Microsoft Windows Server 2016 | All versions | No fix listed |
| Microsoft windows | = Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and Windows Server 2016 | No fix listed |
References
- 97473 third-party-advisory vdb-entry
- 1038239 vdb-entry
- portal.msrc.microsoft.com patch vendor-advisory
- 41880 exploit