CVE-2017-8556
HighSummary
In Microsoft Windows systems, including Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1, Windows Server 2012, Windows 10, and Windows Server 2016, there is a vulnerability that allows elevation of privilege due to improper handling of objects in memory by the graphics component.
Risk Assessment
This vulnerability could allow an attacker to gain higher privileges on the system, potentially leading to unauthorized access to data or the system.
Recommendation
It is recommended to update operating systems to the latest versions and apply available security patches to minimize the risk of exploitation of this vulnerability.
Other vulnerabilities in Microsoft Graphics Component
See all- CVE-2017-11824High
The Microsoft Graphics Component in Windows has a vulnerability that allows for elevation of privilege through improper handling of objects in memory. This affects multiple versions of Windows, including Windows Server 2008 and 2016, as well as Windows 7, 8.1, and 10.
- CVE-2017-11763High
The Microsoft Graphics Component in Windows allows remote code execution due to improper handling of specially crafted embedded fonts. This affects multiple versions of Windows, including Windows Server 2008, Windows 7, Windows 8.1, Windows 10, and Windows Server 2016.
- CVE-2017-11762High
The Microsoft Graphics Component in Windows allows remote code execution due to improper handling of specially crafted embedded fonts. This affects multiple versions of Windows, including Windows Server 2008, Windows 7, Windows 8.1, Windows 10, and Windows Server 2016.
- CVE-2017-0156High
An elevation of privilege vulnerability exists in Windows 7, 8.1, RT 8.1, 10, and Windows Server 2008 R2, 2012, 2012 R2, and 2016 due to improper handling of objects in memory by the Microsoft Graphics Component.
- CVE-2026-77493Critical
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
- CVE-2025-60724Critical
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
- CVE-2026-84000High
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.
- CVE-2026-83990High
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
- CVE-2026-81955High
Heap-based buffer overflow in Microsoft Graphics Component. Allows an unauthorized attacker to execute code over a network.
- CVE-2026-78439High
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Graphics in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka "Microsoft Graphics Component Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8573 and CVE-2017-8574.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS