CVE-2017-8588

CVE-2017-8588: vulnerability in Microsoft Corporation Windows Server 2008 SP2…

Published · Updated

Follow this CVE+ Monitor Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 17%
Microsoft WordPad in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it parses specially crafted files, aka "WordPad Remote Code Execution Vulnerability".
Affected products
Microsoft Corporation · Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
Related CVEs — Microsoft Corporation Windows Server 2008 SP2…

In the same product, most dangerous first.

CVE-2017-8463—CVE-2017-8463EPSS 20.5%CVE-2017-8565—CVE-2017-8565EPSS 18.6%CVE-2017-0170—CVE-2017-0170EPSS 6.7%CVE-2017-8557—CVE-2017-8557EPSS 1.5%