CVE-2017-8494: microsoft corporation microsoft windows Improper Preservation of Permissions
Vulnerability summary
CVE-2017-8494 is a high (CVSS 7.3) Improper Preservation of Permissions vulnerability in microsoft corporation microsoft windows. EPSS estimates a 1.95% chance of exploitation in the next 30 days, higher than 80% of scored vulnerabilities.
Timeline
- 15-06-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a locally-authenticated attacker to run a specially crafted application on a targeted system when Windows Secure Kernel Mode fails to properly handle objects in memory, aka "Windows Elevation of Privilege Vulnerability".
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.95%
Chance of exploitation in the next 30 days
Percentile
80%
Versus all other CVEs
30-day change
0.00 pp
From 1.95% on 22-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Microsoft1 product
- windows_10na | 1511 | 1607
Microsoft corporation1 product
- microsoft windowsMicrosoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.
2 vendors · 2 products
References
2 links
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8494X Refsource CONFIRMPatchVendor Advisory