CVE-2018-8596

CVE-2018-8596 is an information disclosure vulnerability in the Windows GDI component, affecting numerous Windows operating systems from Windows 7 to Windows 10 and various Windows Server versions. With a CVSS score of 6.5 (Medium), this vulnerability can be exploited remotely with low attack complexity, requiring user interaction to disclose sensitive memory contents. While there is no public exploit code available in common databases like Metasploit or ExploitDB, and it is not listed in CISA's KEV catalog, media coverage indicates it was addressed in a patch that also fixed an actively exploited zero-day, suggesting potential historical relevance or awareness. Community discussion and media coverage are minimal, but its EPSS score is higher than 96% of all CVEs, indicating a higher-than-average probability of exploitation.