CVE-2017-8589

Critical

Published: 11/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A vulnerability in Windows allows remote code execution due to improper handling of objects in memory by Windows Search. This affects multiple versions of Windows operating systems, including Windows 7, 8.1, and Windows 10.

Risk Assessment

An attacker could exploit this vulnerability to remotely execute code on the vulnerable system, potentially leading to system takeover or data leakage.

Recommendation

It is recommended to install the latest security updates from Microsoft to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way that Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulnerability".