CVE-2017-11772
HighSummary
The Microsoft Windows Search component on various versions of the operating system allows information disclosure due to improper handling of objects in memory. This vulnerability affects multiple versions of Windows, including Windows Server 2008, Windows 7, Windows 8.1, Windows 10, and Windows Server 2016.
Risk Assessment
Information disclosure may lead to the leakage of sensitive data, posing a security threat to the organization. Attackers could exploit this vulnerability to gain access to confidential information.
Recommendation
It is recommended to update operating systems to the latest versions that include security patches. Additionally, systems should be monitored for unauthorized access.
Other vulnerabilities in Microsoft Windows Search
See all- CVE-2026-69507Medium
A vulnerability in the Windows Search component allows insertion of sensitive information into an externally accessible file or directory. An authorized attacker could exploit this to disclose information over a network.
- CVE-2026-69305High
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
- CVE-2017-11771Critical
The Windows Search component on various versions of Microsoft Windows allows remote code execution due to improper handling of DNS responses.
Original NVD description (English source)
The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure when it fails to properly handle objects in memory, aka "Microsoft Search Information Disclosure Vulnerability".