CVE-2017-8572 is an information disclosure vulnerability affecting Microsoft Outlook 2007, 2010, 2013, and 2016, where the software improperly discloses the contents of its memory. Rated Medium severity (CVSS 5.5), this vulnerability requires user interaction and local access to exploit, potentially leading to the compromise of sensitive information. While the EPSS score indicates a low probability of exploitation, there is no public exploit code available, nor is it listed in CISA's KEV catalog. Community discussion and media coverage are minimal, suggesting limited active exploitation or widespread attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2007CPE matchmatch criteria | cpe:2.3:a:microsoft:outlook:2007:sp3:*:*:*:*:*:* | ||
2010CPE matchmatch criteria | cpe:2.3:a:microsoft:outlook:2010:sp2:*:*:*:*:*:* | ||
2013CPE matchmatch criteria | cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:*:*:*:* | ||
2016CPE matchmatch criteria | cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.