CVE-2017-0258

CVE-2017-0258 is an information disclosure vulnerability in the Windows kernel affecting numerous versions of Microsoft Windows and Windows Server. An authenticated attacker can exploit this flaw by providing a specially crafted document, leading to the disclosure of sensitive information. With a CVSS score of 4.7 (Medium), the attack requires local access and high attack complexity, but can result in high confidentiality impact. While there is no evidence of active exploitation in the wild, a proof-of-concept exploit exists on ExploitDB, and the vulnerability has received minimal community discussion or media coverage.