CVE-2017-0291

—

CVSS 3.0

7.8 high

EPSS

20%p97

Published

Jun 15, 2017 (Jun 15, 2017)

Modified

Jun 17, 2026

Description

Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows remote code execution if a user opens a specially crafted PDF file, aka "Windows PDF Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0292.

Vendors: microsoft
Products: windows 10, windows 8.1, windows rt 8.1, windows server 2012, windows server 2016
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (20.5%)

In the news1 stories

Microsoft Patch Tuesday

Cisco TalosJun 13, 20:48 UTC · Jun 13, 2017Vulnerability CVE-2017-0283 CVE-2017-0291 CVE-2017-0292+37 CVEs