CVE-2017-0188

3.3 lowEPSS 3.0%

A Win32k information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, Windows 10, and Windows Server 2016 when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, aka "Win32k Information Disclosure Vulnerability." This CVE ID is unique from CVE-2017-0189.

Severity

CVSS 3.0

3.3 low

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2017-04-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_10
microsoft:windows_8.1
microsoft:windows_rt_8.1
microsoft:windows_server_2012
microsoft:windows_server_2016

References

http://www.securityfocus.com/bid/97475
http://www.securitytracker.com/id/1038239
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0188
http://www.securityfocus.com/bid/97475
http://www.securitytracker.com/id/1038239

Check your stack JSON