CVE-2017-8473: Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1...

Security readout for executives and security teams

CVE-2017-8473 is a Windows kernel information disclosure flaw. An authenticated attacker would need to run a specially crafted application on an affected Windows host. The main business risk is exposure of sensitive memory information that could support broader compromise, not a confirmed remote takeover from the cited sources. Exposure is most likely on endpoints or servers running the listed Windows versions where authenticated users can execute local applications. Internet-facing status is not enough by itself; the cited description requires authenticated application execution on the target system. Address this through normal vulnerability management with priority for shared or high-value Windows systems. It is not marked KEV in the supplied data, but public exploit-related references and kernel memory disclosure make delayed remediation undesirable. Mitigation focus: Check Microsoft MSRC guidance for applicable updates for each affected Windows version.; Apply vendor-supported Windows security updates where available.; Limit local application execution rights for non-administrative users on affected systems..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.