CVE-2017-0242: Microsoft Windows 7

Medium severity, CVSS 5.5. EPSS: 7.9% chance of exploitation in the next 30 days.

An information disclosure vulnerability exists in the way some ActiveX objects are instantiated, aka "Microsoft ActiveX Information Disclosure Vulnerability."

Affected products

• Microsoft Windows 7: affected versions not specified
• Microsoft Windows Server 2008: affected versions not specified; version r2 only

Published 2017-05-12. Last modified 2026-06-17.