Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016 vulnerabilities

3 known CVE vulnerabilities in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016, translated and rated.

CVE-2017-8563High
A vulnerability in Microsoft Windows allows for elevation of privilege due to Kerberos falling back to NT LAN Manager (NTLM) Authentication Protocol as the default authentication protocol.
CVE-2017-8495High
A vulnerability in Windows systems allows an attacker to bypass Extended Protection for Authentication when Kerberos fails to prevent tampering with the SNAME field during ticket exchange. This is known as 'Kerberos SNAME Security Feature Bypass'.
CVE-2017-0294High
A vulnerability in Microsoft Windows allows an attacker to execute remote code when the system fails to properly handle cabinet files. This affects multiple versions of Windows, including Windows 7, 8.1, 10, and Windows Server.