{"schemaVersion":3,"id":"CVE-2017-8544","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to obtain information to further compromise the user's system when Windows Search fails to handle objects in memory, aka \"Windows Search Information Disclosure Vulnerability\".","dates":{"published":"2017-06-15T01:00:00.000Z","modified":"2024-08-05T16:41:23.656Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.5,"severity":"medium","version":"3.0","versionLabel":"v3.0","source":"NVD","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":5.5,"severity":"medium","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":2.1,"severity":"low","vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.03251,"percentile":0.88229,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":-0.31100000000000017,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.03562},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03562,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.03251,"percentile":0.88229}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.03562,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.03251,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.03251,"percentile":0.88229}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor","description":"The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/200.html"}],"affected":[{"vendor":"microsoft corporation","product":"microsoft windows","name":"Microsoft Windows","label":"microsoft windows","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.","noFixRecorded":false,"fixedIn":null}],"versionsText":"Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.","eol":null,"hubHref":"/vendor/microsoft_corporation/microsoft_windows"},{"vendor":"microsoft","product":"windows_10","name":"windows 10","label":"windows_10","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null},{"text":"1511","noFixRecorded":false,"fixedIn":null},{"text":"1607","noFixRecorded":false,"fixedIn":null},{"text":"1703","noFixRecorded":false,"fixedIn":null}],"versionsText":"na | 1511 | 1607 | 1703","eol":null,"hubHref":"/vendor/microsoft/windows_10"},{"vendor":"microsoft","product":"windows_server_2008","name":"windows server 2008","label":"windows_server_2008","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"r2:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"r2:sp1","eol":null,"hubHref":"/vendor/microsoft/windows_server_2008"},{"vendor":"microsoft","product":"windows_server_2012","name":"windows server 2012","label":"windows_server_2012","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null},{"text":"r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"na | r2","eol":null,"hubHref":"/vendor/microsoft/windows_server_2012"}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.securityfocus.com/bid/98826","label":"www.securityfocus.com/bid/98826","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8544","label":"portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8544","hostname":"portal.msrc.microsoft.com","tags":["X Refsource CONFIRM","Patch","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2017-06-15T01:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-05T16:41:23.656Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":23,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T20:31:09.416Z","stale":false,"partial":false}}