CVE-2017-8543

CRITICALCISA KEV

9.8

Description

Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to take control of the affected system when Windows Search fails to handle objects in memory, aka "Windows Search Remote Code Execution Vulnerability".

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published6/15/2017

Last Modified10/22/2025

Sourcekev

Honeypot Sightings0

CISA KEV

VendorMicrosoft

ProductWindows

Vulnerability NameMicrosoft Windows Search Remote Code Execution Vulnerability

KEV Date Added2022-05-24

Remediation Due Date2022-06-14

Ransomware UseUnknown

Affected Products

microsoft:windows_10_1507microsoft:windows_10_1511microsoft:windows_10_1607microsoft:windows_10_1703microsoft:windows_7microsoft:windows_8.1microsoft:windows_rt_8.1microsoft:windows_server_2008microsoft:windows_server_2012microsoft:windows_server_2016

Weaknesses (CWE)

CWE-281CWE-281

References

http://www.securityfocus.com/bid/98824(secure@microsoft.com)

http://www.securitytracker.com/id/1038667(secure@microsoft.com)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8543(secure@microsoft.com)

http://www.securityfocus.com/bid/98824(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1038667(af854a3a-2127-422b-91ae-364da2661108)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8543(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-8543(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.