CVE-2017-0286: Infoleak

Published Jun 15, 2017

Updated

Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper disclosure of memory contents, aka "Windows Graphics Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-0287, CVE-2017-0288, CVE-2017-0289, CVE-2017-8531, CVE-2017-8532, and CVE-2017-8533.

Affected Software

4 affected components

Microsoft Office=2007-sp3

Microsoft Office=2010-sp2

Microsoft Windows 7=sp1

Microsoft Windows Server 2008=r2-sp1

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0286

Event History

Jun 15, 2017

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-0286?

CVE-2017-0286 has been assigned a medium severity rating due to its potential for improper memory disclosure.

How do I fix CVE-2017-0286?

To fix CVE-2017-0286, ensure that your systems are updated with the latest Microsoft security patches.

What systems are affected by CVE-2017-0286?

CVE-2017-0286 affects various Microsoft operating systems and versions including Windows 7 SP1, Windows 10 Gold, and Windows Server 2008 R2 SP1.

What type of vulnerability is CVE-2017-0286?

CVE-2017-0286 is classified as a graphics information disclosure vulnerability.

Can CVE-2017-0286 be exploited remotely?

CVE-2017-0286 may allow attackers to access sensitive information, but it requires local access to exploit.