CVE-2017-8460

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows information disclosure when a user opens a specially crafted PDF file, aka "Windows PDF Information Disclosure Vulnerability".

Metrics

CVSS 3.0 7.3/10CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
Microsoft Corporation	Windows PDF	Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016

References

http://www.securityfocus.com/bid/98887Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038678Third Party Advisory, VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8460Patch, Vendor Advisory
http://www.securityfocus.com/bid/98887Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038678Third Party Advisory, VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8460Patch, Vendor Advisory

Timeline

Published: Jun 15, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017