CVE-2017-0058: microsoft corporation windows
Vulnerability summary
CVE-2017-0058 is a medium (CVSS 4.7) vulnerability in microsoft corporation windows. EPSS estimates a 3.65% chance of exploitation in the next 30 days, higher than 89.5% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 12-04-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, aka "Win32k Information Disclosure Vulnerability."
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
3.65%
Chance of exploitation in the next 30 days
Percentile
90%
Versus all other CVEs
30-day change
-0.52 pp
From 4.18% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMicrosoft Windows Kernel - 'win32k.sys' Multiple 'NtGdiGetDIBitsInternal' System Call
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Microsoft3 products
- windows_101511 | 1607 | 1703
- windows_server_2008r2:sp1
- windows server 2012r2
Microsoft corporation1 product
- windowsWindows
2 vendors · 4 products
References
4 links
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0058X Refsource CONFIRMPatchVendor Advisory