CVE-2018-8472

CVE-2018-8472 is an information disclosure vulnerability within the Windows Graphics Device Interface (GDI) affecting numerous Windows operating systems, including Windows 7, 8.1, 10, and various Server versions. With a CVSS score of 5.5 (Medium), it allows a local attacker to retrieve sensitive information from a targeted system with low attack complexity and no user interaction required. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog. Community discussion and media coverage are minimal, with only one article noting its patch in the October 2018 Patch Tuesday.