{"schemaVersion":3,"id":"CVE-2017-8493","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to set variables that are either read-only or require authentication when Windows fails to enforce case sensitivity for certain variable checks, aka \"Windows Security Feature Bypass Vulnerability\".","dates":{"published":"2017-06-15T01:00:00.000Z","modified":"2024-08-05T16:34:23.219Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.5,"severity":"medium","version":"3.0","versionLabel":"v3.0","source":"NVD","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":5.5,"severity":"medium","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":2.1,"severity":"low","vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0146,"percentile":0.73216,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.0146},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02156,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0146,"percentile":0.73216}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02156,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0146,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0146,"percentile":0.73216}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-178","name":"Improper Handling of Case Sensitivity","description":"The product does not properly account for differences in case sensitivity when accessing or determining the properties of a resource, leading to inconsistent results.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/178.html"}],"affected":[{"vendor":"microsoft corporation","product":"microsoft windows","name":"Microsoft Windows","label":"microsoft windows","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.","noFixRecorded":false,"fixedIn":null}],"versionsText":"Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.","eol":null,"hubHref":"/vendor/microsoft_corporation/microsoft_windows"},{"vendor":"microsoft","product":"windows_10","name":"windows 10","label":"windows_10","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null},{"text":"1511","noFixRecorded":false,"fixedIn":null},{"text":"1607","noFixRecorded":false,"fixedIn":null},{"text":"1703","noFixRecorded":false,"fixedIn":null}],"versionsText":"na | 1511 | 1607 | 1703","eol":null,"hubHref":"/vendor/microsoft/windows_10"},{"vendor":"microsoft","product":"windows_8.1","name":"windows 8.1","label":"windows_8.1","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_81"},{"vendor":"microsoft","product":"windows_rt_8.1","name":"windows rt 8.1","label":"windows_rt_8.1","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_rt_81"},{"vendor":"microsoft","product":"windows server 2012","name":"Windows Server 2012","label":"windows server 2012","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"r2","eol":null,"hubHref":"/vendor/microsoft/windows_server_2012"},{"vendor":"microsoft","product":"windows server 2016","name":"Windows Server 2016","label":"windows server 2016","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_server_2016"}],"affectedCount":6,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.securitytracker.com/id/1038671","label":"www.securitytracker.com/id/1038671","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8493","label":"portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8493","hostname":"portal.msrc.microsoft.com","tags":["X Refsource CONFIRM","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/98850","label":"www.securityfocus.com/bid/98850","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2017-06-15T01:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-05T16:34:23.219Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":22,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T09:46:26.645Z","stale":false,"partial":false}}