CVE-2017-8460

High

Published: 15/06/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A vulnerability in Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10, and Windows Server 2016 allows information disclosure when a user opens a specially crafted PDF file.

Risk Assessment

Information disclosure may lead to the leakage of sensitive data, posing a security threat to the organization.

Recommendation

It is recommended to avoid opening unknown PDF files and to update operating systems to the latest versions to minimize risk.

Other vulnerabilities in Windows PDF

See all

CVE-2017-0292High
A vulnerability in Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10, and Windows Server 2016 allows remote code execution if a user opens a specially crafted PDF file.
CVE-2017-0291High
The vulnerability in Windows PDF allows remote code execution when a user opens a specially crafted PDF file. It affects Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10, and Windows Server 2016.

Original NVD description (English source)

Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows information disclosure when a user opens a specially crafted PDF file, aka "Windows PDF Information Disclosure Vulnerability".