CVE-2017-0220

The Windows kernel in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows Server 2012 Gold allows authenticated attackers to obtain sensitive information via a specially crafted document, aka "Windows Kernel Information Disclosure Vulnerability," a different vulnerability than CVE-2017-0175, CVE-2017-0258, and CVE-2017-0259.

• CWE-200

• http://www.securityfocus.com/bid/98111Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038445
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0220Patch, Vendor Advisory
• https://www.exploit-db.com/exploits/42009/
• http://www.securityfocus.com/bid/98111Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038445
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0220Patch, Vendor Advisory
• https://www.exploit-db.com/exploits/42009/

Published

May 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-0213Windows COM Aggregate Marshaler in Microsoft Windows Server …7.3
• CVE-2017-0214Windows COM in Microsoft Windows Server 2008 SP2 and R2 SP1,…
• CVE-2017-0215Microsoft Windows 10 1607 and Windows Server 2016 allow an a…
• CVE-2017-0216Microsoft Windows 10 1511, Windows 10 1607, and Windows Serv…
• CVE-2017-0218Microsoft Windows 10 Gold, Windows 10 1511, Windows 10 1607,…
• CVE-2017-0219Microsoft Windows 10 Gold, Windows 10 1511, Windows 10 1607,…
• CVE-2017-0221A vulnerability exists when Microsoft Edge improperly access…
• CVE-2017-0222A remote code execution vulnerability exists when Internet E…8.8
• CVE-2017-0223A remote code execution vulnerability exists in Microsoft Ch…
• CVE-2017-0224A remote code execution vulnerability exists in the way Java…
• CVE-2017-0226A remote code execution vulnerability exists when Internet E…
• CVE-2017-0227A remote code execution vulnerability exists in Microsoft Ed…