Vulnerability Database

299,879

Total vulnerabilities in the database

CVE-2017-11852

Microsoft GDI Component in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an attacker to log on to an affected system and run a specially crafted application to compromise the user's system, due improperly disclosing kernel memory addresses, aka "Windows GDI Information Disclosure Vulnerability".

  • Published: Nov 15, 2017
  • Updated: Nov 9, 2025
  • CVE: CVE-2017-11852
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 1.9
  • AV:L/AC:M/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
microsoft / windows_server_2008 r2-sp1 r2-sp1.x
microsoft / windows_7 --sp1 --sp1.x