CVE-2017-0165: microsoft corporation windows
Vulnerability summary
CVE-2017-0165 is a high (CVSS 7.8) vulnerability in microsoft corporation windows. EPSS estimates a 3.34% chance of exploitation in the next 30 days, higher than 88.5% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 12-04-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 fails to properly sanitize handles in memory, aka "Windows Elevation of Privilege Vulnerability."
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
3.34%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
-1.00 pp
From 4.33% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMicrosoft Windows 10 (Build 10586) - 'IEETWCollector' Arbitrary Directory/File Deletion Privilege Escalation
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft2 products
Microsoft corporation1 product
- windowsWindows 10, Windows 10 1511, Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2
2 vendors · 3 products
References
4 links
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0165X Refsource CONFIRMPatchVendor Advisory