← back
CVE-2017-8557

CVE-2017-8557

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.5%
exploitation probability
1.5%top 26% of all CVEs
observed exploitation
nono source reports it
Windows System Information Console in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an information disclosure vulnerability improperly parses XML input containing a reference to an external entity, aka "Windows System Information Console Information Disclosure Vulnerability".
Affected products
Microsoft Corporation · Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
References
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8557http://www.securityfocus.com/bid/99387http://www.securityfocus.com/bid/99398http://www.securitytracker.com/id/1038855