CVE-2017-8483

CVE-2017-8483 is an information disclosure vulnerability in the Microsoft Windows kernel affecting various versions including Windows 7, 8.1, 10, and Server 2008, 2012, and 2016. An authenticated attacker can exploit this flaw by running a specially crafted application to obtain sensitive information. The vulnerability has a CVSS v3 score of 5.0 (Medium), indicating a local attack vector with low attack complexity, requiring user interaction, and resulting in high confidentiality impact without affecting integrity or availability. Its EPSS score is low, suggesting a minimal likelihood of exploitation. While there is no evidence of active exploitation (not in KEV), an ExploitDB entry exists detailing an out-of-bounds read in ATMFD.DLL. There is no Metasploit or Nuclei support, and community discussion and media coverage are negligible.