CVE-2017-8620
HighSummary
The vulnerability in Windows Search allows for remote code execution in various versions of Windows, including Windows Server 2008, Windows 7, Windows 8.1, Windows 10, and Windows Server 2016. The issue arises from improper handling of objects in memory.
Risk Assessment
Exploitation of this vulnerability could lead to remote control of the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update systems to the latest versions and apply available security patches to minimize risk.
Other vulnerabilities in Windows Search
See all- CVE-2017-11788High
The vulnerability in Windows Search allows an unauthenticated attacker to remotely send specially crafted messages that could lead to a denial of service due to improper handling of objects in memory.
- CVE-2023-36884HighActively exploited
A vulnerability in Windows Search allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
- CVE-2017-8589Critical
A vulnerability in Windows allows remote code execution due to improper handling of objects in memory by Windows Search. This affects multiple versions of Windows operating systems, including Windows 7, 8.1, and Windows 10.
Original NVD description (English source)
Windows Search in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it improperly handles objects in memory, aka "Windows Search Remote Code Execution Vulnerability".