Medium (5.5) in microsoft. EPSS 2.4% chance of exploitation in the next 30 days.
The Microsoft Graphics Component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability in the way it handles objects in memory, aka "Microsoft Graphics Information Disclosure Vulnerability".
Severity
CVSS 3.0
5.5 medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
2.4% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)