Medium severity4.4NVD Advisory· Published May 12, 2017· Updated May 13, 2026
CVE-2017-0190
CVE-2017-0190
Description
The GDI component in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "GDI Information Disclosure Vulnerability."
Affected products
1- Microsoft Corporation/Microsoft Windowsv5Range: Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0190nvdPatchVendor Advisory
- www.securityfocus.com/bid/98298nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1038451nvd
News mentions
0No linked articles in our index yet.