Vulnerability · NVD
CVE-2017-0293
CVE-2017-0293 : high severity (CVSS 7.5). No tracked catalog app is linked to this CVE.
- Severity (CVSS)
- 7.5
- Exploitation
- 14.4 %
- Tracked apps
- 0
- Still exposed
- 0
NVD scale
EPSS, predicted over 30 days
Microsoft Windows PDF Library in Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability when it improperly handles objects in memory, aka "Windows PDF Remote Code Execution Vulnerability".
Attack vector : Network
No privileges required
Show raw CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
14.42%
moderate exploit risk
percentile 96.5%
OS versions that fix this CVE
This CVE is resolved by the following OS security releases. Update the OS to at least the listed version.
- Windows Server 2016 (Server Core installation) Fixed in -
- Windows Server 2016 Fixed in -
- Windows 10 1703 · 2017-03 Fixed in -
- Windows 10 1607 · 2016-07 Fixed in -
- Windows 10 1511 · 2015-11 Fixed in -
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.