CVE-2017-0188: Infoleak

Published Apr 12, 2017

Updated

A Win32k information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, Windows 10, and Windows Server 2016 when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, aka "Win32k Information Disclosure Vulnerability." This CVE ID is unique from CVE-2017-0189.

Affected Software

9 affected components

Microsoft Windows 10

Microsoft Windows 10=1511

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0188

Event History

Apr 12, 2017

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-0188?

CVE-2017-0188 has a CVSS score indicating that it is a moderate severity vulnerability that can lead to information disclosure.

How do I fix CVE-2017-0188?

To fix CVE-2017-0188, you should apply the latest security updates provided by Microsoft for the affected versions of Windows.

Which operating systems are affected by CVE-2017-0188?

CVE-2017-0188 affects Windows 8.1, Windows RT 8.1, Windows 10, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016.

Can an attacker exploit CVE-2017-0188 remotely?

Yes, an attacker can exploit CVE-2017-0188 remotely to obtain sensitive kernel information.

What type of vulnerability is CVE-2017-0188?

CVE-2017-0188 is categorized as an information disclosure vulnerability.