CVE-2017-8543KEV · OVERDUE

Microsoft Windows Search Remote Code Execution Vulnerability

Critical · published June 15, 2017

Patch now

Confirmed exploited, and the score agrees

CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 99.5th percentile for exploit probability.

1591
days past CISA
deadline
CVSS v3.1
9.8
EPSS
74%
Percentile
99.5
In the wild
Confirmed
What it is

🚨 An unhandled memory object is all it takes for an attacker to seize control of your system! This critical vulnerability in Microsoft Windows Search affects multiple versions, making it a prime target. 🔥 Think of this like a library that lets anyone walk in and start rearranging the books — a minor oversight in the search process allows intruders to access and manipulate everything in the system's memory without any security checks. An attacker exploiting this vulnerability could execute arbitrary code, gaining full control over the affected system. This puts sensitive data at risk and could lead to unauthorized access, data theft, or even turning your system into a botnet for further attacks. Absolutely devastating!

Put simply

Think of this like a library that lets anyone walk in and start rearranging the books — a minor oversight in the search process allows intruders to access and manipulate everything in the system's memory without any security checks. This vulnerability occurs when Windows Search mishandles objects in memory, allowing attackers to execute remote code without proper authentication — it's a perfect storm for exploitation!

What to do

An attacker exploiting this vulnerability could execute arbitrary code, gaining full control over the affected system. This puts sensitive data at risk and could lead to unauthorized access, data theft, or even turning your system into a botnet for further attacks. Absolutely devastating! To defend against this threat, immediately apply the latest security updates provided by Microsoft for your version of Windows. Regularly check for patches and consider upgrading to a newer, supported operating system if you're on an older version. 🛡️ You've got this! Stay vigilant and keep your systems updated to fend off these threats! 💪✨

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.74388 · 99.5th percentile
Published
2017-06-15T01:00Z
KEV added
2022-05-24 · due 2022-06-14
EPSS history
Timeline
  • 24 MAY 00:00Z
    Added to CISA KEV — remediate by Jun 14
    kev
  • 15 JUN 01:00Z
    Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1…
    cvelistv5