CVE-2017-0170

CVE-2017-0170: vulnerability in Microsoft Corporation Windows Server 2008 SP2…

Published · Updated

Follow this CVE+ Monitor Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 6.7%
Windows Performance Monitor in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an information disclosure vulnerability due to the way it parses XML input, aka "Windows Performance Monitor Information Disclosure Vulnerability".
Affected products
Microsoft Corporation · Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
Related CVEs — Microsoft Corporation Windows Server 2008 SP2…

In the same product, most dangerous first.

CVE-2017-8463—CVE-2017-8463EPSS 20.5%CVE-2017-8565—CVE-2017-8565EPSS 18.6%CVE-2017-8588—CVE-2017-8588EPSS 17.2%CVE-2017-8557—CVE-2017-8557EPSS 1.5%