CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2017-06-15
Microsoft Windows Search Service Remote Code Execution Vulnerability Analysis and Mitigation Guide (CVE-2017-8543)
[Affected Scope] Broad range of Microsoft Windows operating systems including Windows XP, Vista, 7, 8, 8.1, 10, and Windows Server 2003, 2008, 2012, 2016.
[Impact] An unauthenticated remote attacker can exploit this vulnerability via SMB to execute arbitrary code with SYSTEM privileges, leading to full system compromise.
[Mitigation] Immediately apply the official Microsoft security patches, or disable the Windows Search service and block SMB port (TCP 445) as a temporary workaround.