CVE-2017-11771
CriticalSummary
The Windows Search component on various versions of Microsoft Windows allows remote code execution due to improper handling of DNS responses.
Risk Assessment
Exploitation of this vulnerability could lead to remote control of the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update operating systems to the latest versions and apply appropriate security patches.
Other vulnerabilities in Microsoft Windows Search
See all- CVE-2017-11772High
The Microsoft Windows Search component on various versions of the operating system allows information disclosure due to improper handling of objects in memory. This vulnerability affects multiple versions of Windows, including Windows Server 2008, Windows 7, Windows 8.1, Windows 10, and Windows Server 2016.
- CVE-2026-69507Medium
A vulnerability in the Windows Search component allows insertion of sensitive information into an externally accessible file or directory. An authorized attacker could exploit this to disclose information over a network.
- CVE-2026-69305High
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
Original NVD description (English source)
The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly handle DNS responses, aka "Windows Search Remote Code Execution Vulnerability".