CVE-2017-8676

CVE-2017-8676 is an information disclosure vulnerability in the Windows Graphics Device Interface (GDI) affecting numerous Microsoft Windows, Office, and communication products. An authenticated attacker can exploit this flaw by crafting a malicious application to retrieve sensitive information from a targeted system. With a CVSS score of 3.3 (Low), it requires local access and has a low impact on confidentiality, with no integrity or availability impact. There is no public exploit code available (Metasploit, Nuclei, ExploitDB), and it is not listed in CISA's KEV catalog, indicating no active exploitation. Community discussion and media coverage are minimal, suggesting limited attention.