CyberSec.Space Logo
Back to CVE Browser

CVE-2017-8543

Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score56.4800%
EPSS Percentile88.25th
PublishedJun 15, 2017
Last ModifiedApr 22, 2026

Vulnerability Description

Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to take control of the affected system when Windows Search fails to handle objects in memory, aka "Windows Search Remote Code Execution Vulnerability".

Affected Platforms (CPE)

💻
Microsoft

Windows 10 1507

All versions
💻
Microsoft

Windows 10 1507

All versions
💻
Microsoft

Windows 10 1511

All versions
💻
Microsoft

Windows 10 1511

All versions
💻
Microsoft

Windows 10 1607

All versions
💻
Microsoft

Windows 10 1607

All versions
💻
Microsoft

Windows 10 1703

All versions
💻
Microsoft

Windows 10 1703

All versions
💻
Microsoft

Windows 7

All versions
💻
Microsoft

Windows 8.1

All versions
💻
Microsoft

Windows Rt 8.1

All versions
💻
Microsoft

Windows Server 2008

All versions
💻
Microsoft

Windows Server 2008

= r2
💻
Microsoft

Windows Server 2008

= r2
💻
Microsoft

Windows Server 2012

All versions
💻
Microsoft

Windows Server 2012

= r2
💻
Microsoft

Windows Server 2016

All versions

References & Advisories

🔗 http://www.securityfocus.com/bid/98824
🔗 http://www.securitytracker.com/id/1038667
🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8543
🔗 http://www.securityfocus.com/bid/98824
🔗 http://www.securitytracker.com/id/1038667
🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8543
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-8543

Related Vulnerabilities

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...

CVE-2026-121895.3

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzm...

CVE-2026-121886.3

A vulnerability was detected in Grit42 Grit up to 0.11.0. Affected by this issue is some unknown functionality of the file modules...