Lucene search

K
cvelistMicrosoftCVELIST:CVE-2017-8620
HistoryAug 08, 2017 - 12:00 a.m.

CVE-2017-8620

2017-08-0800:00:00
microsoft
www.cve.org

8.7 High

AI Score

Confidence

High

0.723 High

EPSS

Percentile

98.1%

Windows Search in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it improperly handles objects in memory, aka “Windows Search Remote Code Execution Vulnerability”.

CNA Affected

[
  {
    "product": "Microsoft Windows Search Component",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016"
      }
    ]
  }
]

8.7 High

AI Score

Confidence

High

0.723 High

EPSS

Percentile

98.1%