CVE-2017-0058

A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, aka "Win32k Information Disclosure Vulnerability."

• CWE-200

• http://www.securityfocus.com/bid/97462Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038239
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0058Patch, Vendor Advisory
• https://www.exploit-db.com/exploits/41879/
• http://www.securityfocus.com/bid/97462Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038239
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0058Patch, Vendor Advisory
• https://www.exploit-db.com/exploits/41879/

Published

Apr 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-0051Microsoft Windows 10 1607 and Windows Server 2016 allow remo…
• CVE-2017-0052Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Exc…
• CVE-2017-0053Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Wo…
• CVE-2017-0055Microsoft Internet Information Server (IIS) in Windows Vista…
• CVE-2017-0056The kernel-mode drivers in Microsoft Windows Vista SP2; Wind…
• CVE-2017-0057DNS client in Microsoft Windows 8.1; Windows Server 2012 R2,…
• CVE-2017-0059Microsoft Internet Explorer 9 through 11 allow remote attack…4.3
• CVE-2017-0060The Graphics Device Interface (GDI) in Microsoft Windows Vis…5.5
• CVE-2017-0061The Color Management Module (ICM32.dll) memory handling func…
• CVE-2017-0062The Graphics Device Interface (GDI) in Microsoft Windows Vis…
• CVE-2017-0063The Color Management Module (ICM32.dll) memory handling func…
• CVE-2017-0064A security feature bypass vulnerability exists in Internet E…