CVE-2017-11771: vulnerability in Microsoft Corporation Windows Search
Published · Updated
15Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 52%
exploitation probability
52%top 1% of all CVEs
observed exploitation
nono source reports it
The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly handle DNS responses, aka "Windows Search Remote Code Execution Vulnerability".
Affected products
Microsoft Corporation · Windows SearchRelated CVEs — Microsoft Corporation Windows Search
In the same product, most dangerous first.