{"id":"CVE-2017-8553","aliases":["EUVD-2017-17503","GHSA-mvcc-9fpf-cmrm"],"status":"published","title":"An information disclosure vulnerability exists in Microsoft Windows Server 2008 SP2 and R2 SP1,...","description":"An information disclosure vulnerability exists in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows Server 2016 when the Windows kernel improperly handles objects in memory, aka \"GDI Information Disclosure Vulnerability\".","severity":{"version":"3.0","score":4.7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0254,"percentile":0.85084,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2017-06-15T01:00:00Z","modified":"2026-06-17T01:26:34Z","products":[{"vendor":"microsoft","product":"windows_8.1"},{"vendor":"microsoft","product":"windows_rt_8.1"},{"vendor":"microsoft","product":"windows_server_2008"},{"vendor":"microsoft","product":"windows_server_2012"},{"vendor":"microsoft","product":"windows_server_2016"},{"vendor":"microsoft corporation","product":"windows kernel"}],"references":[{"url":"http://www.securitytracker.com/id/1038662","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/98940","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8553","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-8553"},{"url":"https://github.com/advisories/GHSA-mvcc-9fpf-cmrm"}],"sources":{"cve":[{"id":"CVE-2017-8553","description":"An information disclosure vulnerability exists in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows Server 2016 when the Windows kernel improperly handles objects in memory, aka \"GDI Information Disclosure Vulnerability\".","status":"published","published":"2017-06-15T01:00:00Z","modified":"2024-08-05T16:41:23.599Z","updated_at":"2026-11-02T14:33:14.89365Z"}],"euvd":[{"id":"EUVD-2017-17503","description":"An information disclosure vulnerability exists in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows Server 2016 when the Windows kernel improperly handles objects in memory, aka \"GDI Information Disclosure Vulnerability\".","status":"published","published":"2017-06-15T01:00:00Z","modified":"2024-08-05T16:41:23Z","updated_at":"2026-11-03T02:23:30.219959Z"}],"ghsa":[{"id":"GHSA-mvcc-9fpf-cmrm","title":"An information disclosure vulnerability exists in Microsoft Windows Server 2008 SP2 and R2 SP1,...","description":"An information disclosure vulnerability exists in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows Server 2016 when the Windows kernel improperly handles objects in memory, aka \"GDI Information Disclosure Vulnerability\".","status":"published","published":"2022-05-14T01:15:22Z","modified":"2023-02-02T05:03:22Z","cvss":[{"version":"3.0","score":4.7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:51:37.684525Z"}],"nvd":[{"id":"CVE-2017-8553","description":"An information disclosure vulnerability exists in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows Server 2016 when the Windows kernel improperly handles objects in memory, aka \"GDI Information Disclosure Vulnerability\".","status":"published","published":"2017-06-15T01:29:04.757Z","modified":"2026-06-17T01:26:34.157Z","cvss":[{"version":"3.0","score":4.7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:50.782497Z"}]}}