Windows Search Remote Code Execution Vulnerability for Windows 8.1 for x64-based Systems (KB4034672)

Risk Information

Base Score
8.7
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
54.603%

CVE Information

Patch Details

Patch associated with this vulnerability is supported by ManageEngine.

Patch ID
22915

Patch Description
2017-08 Security Only Quality Update for Windows 8.1 for x64-based Systems (KB4034672)

References

http://www.securityfocus.com/bid/100032
http://www.securityfocus.com/bid/100034
http://www.securityfocus.com/bid/100038
http://www.securityfocus.com/bid/100039
http://www.securityfocus.com/bid/100061
http://www.securityfocus.com/bid/100069
http://www.securityfocus.com/bid/100092
http://www.securityfocus.com/bid/98884
http://www.securityfocus.com/bid/99430
http://www.securitytracker.com/id/1038671
http://www.securitytracker.com/id/1039091
http://www.securitytracker.com/id/1039092
http://www.securitytracker.com/id/1039097
http://www.securitytracker.com/id/1039102
http://www.securitytracker.com/id/1039105
http://www.securitytracker.com/id/1039106
http://www.securitytracker.com/id/1039108
http://www.securitytracker.com/id/1039109
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0174
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0293
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0299
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-8591
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-8593
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-8620
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-8624
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-8633
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-8668
https://threatpost.com/windows-search-bug-worth-watching-and-squashing/127434/
https://www.exploit-db.com/exploits/42219/
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-8666
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-8664