A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides kernel information.

published 2017-04-12 9 y ago modified 2026-06-17 4 mo ago also EUVD-2017-0425

cvss: 4.7; version 3.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 3.7%; EPSS 3.7% chance of exploitation in 30 days, percentile 89%
public exploits: 1; Exploit-DB

A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, aka "Win32k Information Disclosure Vulnerability."

Patch / fix

links 1

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0058 advisory

Timeline

2017-04-12 Published
2017-04-13 First public exploit (EDB-41879)

Exploit prediction

3.65% chance of exploitation in the next 30 days, higher than 89% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

EDB-41879 Microsoft Windows Kernel - 'win32k.sys' Multiple 'NtGdiGetDIBitsInternal' System Call dos, 2017-04-13

CVSS scores

assigned by	version	score	vector
NVD	3.0	4.7	CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD	2.0	1.9	AV:L/AC:M/Au:N/C:P/I:N/A:N

Affected products

Microsoft Corporation Windows

Classification

Weakness

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

portal.msrc.microsoft.com /en-US/security-guidance/advisory/CVE-2017-0058
patch, vendor-advisory
exploit-db.com /exploits/41879/
exploit
securityfocus.com /bid/97462
vdb-entry, third-party-advisory
securitytracker.com /id/1038239
vdb-entry

Sources

CVE List CVE-2017-0058
NVD CVE-2017-0058

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary