Information disclosure in Microsoft Windows and Windows Server - CVE-2017-0096

Vulnerability details

The vulnerability allows a remote attacker with access to guest operating system to disclose memory information on the host system.

Successful exploitation of this vulnerability may allow an attacker to gain access to potentially sensitive information.

Affected software

How to mitigate CVE-2017-0096

Install updates from vendor's website.

External References

• https://technet.microsoft.com/en-us/library/security/MS17-008

Related Security Bulletins

• Multiple vulnerabilities in Microsoft Windows Hyper-V
• Hyper-V Information Disclosure Vulnerability