Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2017-8472

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 allow an authenticated attacker to run a specially crafted application when the Windows kernel improperly initializes objects in memory, aka "Win32k Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8470, CVE-2017-8471, CVE-2017-8473, CVE-2017-8475, CVE-2017-8477, and CVE-2017-8484.

  • Published: Jun 15, 2017
  • Updated: Apr 13, 2023
  • CVE: CVE-2017-8472
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5
  • AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

CVSS v2:

  • Severity: Low
  • Score: 1.9
  • AV:L/AC:M/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
microsoft / windows_server_2008 r2-sp1 r2-sp1.x
microsoft / windows_server_2008 --sp2 --sp2.x
microsoft / windows_7 --sp1 --sp1.x