CVE-2017-11779

The Microsoft Windows Domain Name System (DNS) DNSAPI.dll on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly handle DNS responses, aka "Windows DNSAPI Remote Code Execution Vulnerability".

Affected products

Windows, Windows 10, Windows 8.1, Windows Rt 8.1, Windows Server 2012 R2, Windows Server 2016

Microsoft Windows 10

All versions

Microsoft Windows 8.1

All versions

Microsoft Windows Rt 8.1

All versions

Microsoft Windows Server 2012

= R2

Microsoft Windows Server 2016

All versions

CVSS 2.0

9.3 HIGH

CVSS 3.1

8.1 HIGH

EPSS

25.4% (98th percentile)

NVD status

Modified

Published

2017-10-13