CVE-2017-0060

CVE-2017-0060 is an information disclosure vulnerability in the Graphics Device Interface (GDI) of various Microsoft Windows versions, including Vista, Windows 7, 8.1, 10, and Server editions. An attacker could exploit this by tricking a user into visiting a crafted website, allowing them to obtain sensitive information from process memory. Rated as Medium severity (CVSS 5.5), this vulnerability requires local access and has a high impact on confidentiality. While there is an ExploitDB entry for an out-of-bounds read related to MS17-013, there is no evidence of active exploitation, Metasploit modules, or significant community discussion.