CVE-2017-0188: Infoleak
First published: Wed Apr 12 2017(Updated: )
A Win32k information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, Windows 10, and Windows Server 2016 when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, aka "Win32k Information Disclosure Vulnerability." This CVE ID is unique from CVE-2017-0189.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Windows 10 | ||
| Windows 10 | =1511 | |
| Windows 10 | =1607 | |
| Windows 10 | =1703 | |
| Microsoft Windows | ||
| Microsoft Windows RT | ||
| Microsoft Windows Server | ||
| Microsoft Windows Server | =r2 | |
| Microsoft Windows Server 2016 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-0188?
CVE-2017-0188 has a CVSS score indicating that it is a moderate severity vulnerability that can lead to information disclosure.
How do I fix CVE-2017-0188?
To fix CVE-2017-0188, you should apply the latest security updates provided by Microsoft for the affected versions of Windows.
Which operating systems are affected by CVE-2017-0188?
CVE-2017-0188 affects Windows 8.1, Windows RT 8.1, Windows 10, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016.
Can an attacker exploit CVE-2017-0188 remotely?
Yes, an attacker can exploit CVE-2017-0188 remotely to obtain sensitive kernel information.
What type of vulnerability is CVE-2017-0188?
CVE-2017-0188 is categorized as an information disclosure vulnerability.
- agent/type
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/remedy
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/windows 10
- version/windows 10/1511
- version/windows 10/1607
- version/windows 10/1703
- canonical/microsoft windows
- canonical/microsoft windows rt
- canonical/microsoft windows server
- version/microsoft windows server/r2
- canonical/microsoft windows server 2016