CVE-2017-8463

CVE-2017-8463: vulnerability in Microsoft Corporation Windows Server 2008 SP2…

Published · Updated

Follow this CVE+ Monitor Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 20%
Windows Shell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it improperly handles executable files and shares during rename operations, aka "Windows Explorer Remote Code Execution Vulnerability".
Affected products
Microsoft Corporation · Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
Related CVEs — Microsoft Corporation Windows Server 2008 SP2…

In the same product, most dangerous first.

CVE-2017-8565—CVE-2017-8565EPSS 18.6%CVE-2017-8588—CVE-2017-8588EPSS 17.2%CVE-2017-0170—CVE-2017-0170EPSS 6.7%CVE-2017-8557—CVE-2017-8557EPSS 1.5%