CVE-2017-2540

CVE-2017-2540 describes a memory-read restriction bypass vulnerability in the WindowServer component of macOS versions prior to 10.12.5. An attacker could exploit this by tricking a user into installing a crafted application. The vulnerability has a CVSS score of 5.5 (Medium), indicating a local attack vector with low complexity, requiring user interaction, and potentially leading to high confidentiality impact. There is no evidence of active exploitation, nor are there publicly available exploit modules like Metasploit or Nuclei. While there's limited community discussion, the vulnerability did receive some media coverage at the time of its disclosure.