Win32k Information Disclosure Vulnerability

🗓️ 12 Sep 2017 07:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 36 Views

Windows kernel vulnerability allows KASLR bypas

Reporter	Title	Published	Views	Family All 44
0day.today	Microsoft Windows Kernel - win32k!NtGdiDoBanding Stack Memory Disclosure Exploit	18 Sep 201700:00	–	zdt
Circl	CVE-2017-8687	18 Sep 201700:00	–	circl
CNVD	Microsoft Windows kernel information disclosure vulnerability (CNVD-2017-32964)	13 Sep 201700:00	–	cnvd
CVE	CVE-2017-8687	13 Sep 201701:00	–	cve
Cvelist	CVE-2017-8687	13 Sep 201701:00	–	cvelist
Microsoft KB	September 12, 2017—KB4038777 (Monthly Rollup)	12 Sep 201707:00	–	mskb
Microsoft KB	September 12, 2017—KB4038779 (Security-only update)	12 Sep 201707:00	–	mskb
Microsoft KB	September 12, 2017—KB4038781 (OS Build 10240.17609)	12 Sep 201707:00	–	mskb
Microsoft KB	September 12, 2017—KB4038782 (OS Build 14393.1715)	12 Sep 201707:00	–	mskb
Microsoft KB	September 12, 2017—KB4038783 (OS Build 10586.1106)	12 Sep 201707:00	–	mskb

Vulners

Node

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012

OR

microsoft windows_server_2012

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_itanium-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_rt_8.1

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_server_2016_(server_core_installation)

OR

microsoft windows_server_2016

OR

microsoft windows_10_version_1607_for_x64-based_systems

OR

microsoft windows_10_version_1607_for_32-bit_systems

OR

microsoft windows_10_version_1511_for_x64-based_systems

OR

microsoft windows_10_version_1511_for_32-bit_systems

OR

microsoft windows_10_for_x64-based_systems

OR

microsoft windows_10_for_32-bit_systems

OR

microsoft windows_10_version_1703_for_x64-based_systems

OR

microsoft windows_10_version_1703_for_32-bit_systems

12 Sep 2017 07:00Current

2.1Low risk

Vulners AI Score2.1

CVSS 22.1

CVSS 35.5

EPSS0.0423

windows kernel vulnerability kaslr bypass memory addresses exploit microsoft