CVE-2017-8543

Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to take control of the affected system when Windows Search fails to handle objects in memory, aka "Windows Search Remote Code Execution Vulnerability".

Affected products

Smb, Windows, Windows 10, Windows 7, Windows 8, Windows 8.1, Windows Rt 8.1, Windows Search

Microsoft Windows 10 1507

All versions

Microsoft Windows 10 1511

All versions

Microsoft Windows 10 1607

All versions

Microsoft Windows 10 1703

All versions

Microsoft Windows 7

All versions

Microsoft Windows 8.1

All versions

Fix

Available

CVSS 2.0

10.0 HIGH

CVSS 3.1

9.8 CRITICAL

EPSS

74.3% (99th percentile)

Weakness

CWE-281

NVD status

Analyzed

Published

2017-06-15