CVE-2017-8695

CVE-2017-8695 is a Graphics Component Information Disclosure Vulnerability affecting Windows Uniscribe across numerous Microsoft products, including various Windows versions, Office suites, Lync, and Skype for Business. This vulnerability has a CVSS score of 5.3 (MEDIUM), indicating that an attacker could obtain sensitive information to facilitate further system compromise through a specially crafted document or untrusted webpage, requiring user interaction and having high confidentiality impact. Despite its potential, there is no evidence of active exploitation (KEV: No), nor are there public Metasploit or Nuclei exploits. While it garnered some media attention and community discussion, its EPSS score is low, suggesting a limited likelihood of exploitation in the wild.