The Windows GDI component in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Windows Elevation of Privilege Vulnerability".
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0750