Windows Graphics Component Information Disclosure Vulnerability

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
A user would need to be tricked into opening a folder that contains a specially crafted file.

Is the Preview Pane an attack vector for this vulnerability?
No, the Preview Pane is not an attack vector.

What type of information could be disclosed by this vulnerability?
A successful exploitation of this vulnerability leaks metafile memory values back to an attacker within the browser.

Security updates
10.0.17763.8511 — https://support.microsoft.com/help/5078752
10.0.20348.4893 — https://support.microsoft.com/help/5078766
10.0.20348.4830 — https://support.microsoft.com/help/5078737
10.0.19044.7058 — https://support.microsoft.com/help/5078885
10.0.26100.32522 — https://support.microsoft.com/help/5078740
10.0.26100.32463 — https://support.microsoft.com/help/5078736
10.0.26200.8037 — https://support.microsoft.com/help/5079473
10.0.26200.7979 — https://support.microsoft.com/help/5079420
10.0.22631.6783 — https://support.microsoft.com/help/5078883
10.0.25398.2207 — https://support.microsoft.com/help/5078734
10.0.14393.8957 — https://support.microsoft.com/help/5078938
6.2.9200.25973 — https://support.microsoft.com/help/5078775
6.3.9600.23074 — https://support.microsoft.com/help/5078774
10.0.28000.1719 — https://support.microsoft.com/help/5079466
16.0.19822.20000 — https://support.google.com/googleplay/answer/113412?hl=en