CVE-2017-0293

—

CVSS 3.0

7.5 high

EPSS

14%p96

Published

Aug 8, 2017 (Aug 8, 2017)

Modified

Jun 17, 2026

Description

Microsoft Windows PDF Library in Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability when it improperly handles objects in memory, aka "Windows PDF Remote Code Execution Vulnerability".

Vendors: microsoft
Products: windows 10, windows 8.1, windows rt 8.1, windows server 2008, windows server 2012, windows server 2016
Weakness: CWE-119
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (14.4%)

In the news2 stories

Microsoft fixes 25 critical issues in August Patch Tuesday

Help Net SecurityAug 9, 00:00 UTC · Aug 9, 2017Vulnerability in the wildCVE-2017-8691 CVE-2017-0293 CVE-2017-8620

Microsoft Patch Tuesday

Cisco TalosAug 8, 18:30 UTC · Aug 8, 2017Vulnerability CVE-2017-8653 CVE-2017-8669 CVE-2017-8661+38 CVEs