CVE-2017-8554

CVE-2017-8554 is a medium-severity information disclosure vulnerability affecting the kernel in various versions of Microsoft Windows, including Windows 7, 8.1, 10, and Windows Server 2008, 2012, and 2016. An authenticated attacker can exploit this flaw by running a specially crafted application to obtain sensitive memory contents. The attack requires local access and high attack complexity, but can lead to a complete compromise of confidentiality. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.