CVE-2017-8557

CVE-2017-8557: vulnerability in Microsoft Corporation Windows Server 2008 SP2…

Published · Updated

Follow this CVE+ Monitor Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.5%
Windows System Information Console in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an information disclosure vulnerability improperly parses XML input containing a reference to an external entity, aka "Windows System Information Console Information Disclosure Vulnerability".
Affected products
Microsoft Corporation · Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
Related CVEs — Microsoft Corporation Windows Server 2008 SP2…

In the same product, most dangerous first.

CVE-2017-8463—CVE-2017-8463EPSS 20.5%CVE-2017-8565—CVE-2017-8565EPSS 18.6%CVE-2017-8588—CVE-2017-8588EPSS 17.2%CVE-2017-0170—CVE-2017-0170EPSS 6.7%