CVE-2017-0259 The Windows kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows authenticated attackers to obtain sensitive infor...
MediumCVSS 4.7
EPSS 9.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The Windows kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows authenticated attackers to obtain sensitive information via a specially crafted document, aka "Windows Kernel Information Disclosure Vulnerability," a different vulnerability than CVE-2017-0175, CVE-2017-0220, and CVE-2017-0258.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 10 | All versions | No fix listed |
| Microsoft windows 10 | = 1511 | No fix listed |
| Microsoft windows 10 | = 1607 | No fix listed |
| Microsoft windows 10 | = 1703 | No fix listed |
| Microsoft windows 8.1 | All versions | No fix listed |
| Microsoft windows rt 8.1 | All versions | No fix listed |
| Microsoft Windows Server 2012 | = r2 | No fix listed |
| Microsoft Windows Server 2016 | All versions | No fix listed |
| Microsoft Windows | = Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 | No fix listed |
References
- 98113 third-party-advisory vdb-entry
- portal.msrc.microsoft.com patch vendor-advisory
- 42007 exploit