CVE-2017-11779

CVSS 3.0: 8.1 high
EPSS: 33%p98
Published: Oct 13, 2017 · Oct 13, 2017
Modified: Jun 17, 2026

Analyze CVE-2017-11779 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

The Microsoft Windows Domain Name System (DNS) DNSAPI.dll on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly handle DNS responses, aka "Windows DNSAPI Remote Code Execution Vulnerability".

Vendors: microsoft

Products: windows 10, windows 8.1, windows rt 8.1, windows server 2012, windows server 2016

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (33.3%)

In the news

6 stories

Microsoft's October Patch Tuesday addresses critical Windows DNS client Zero

Security AffairsOct 10, 21:23 UTC · Oct 10, 2017VulnerabilityCVE-2017-117794 · 2 reads

Microsoft Patch Tuesday

Cisco TalosOct 10, 20:25 UTC · Oct 10, 2017VulnerabilityCVE-2017-11813 CVE-2017-11822 CVE-2017-11762+383

Bugs in Windows DNS client open millions of users to attack

Help Net SecurityOct 10, 00:00 UTC · Oct 10, 2017Exploit / PoCCVE-2017-117792 · 1 read

Description · NVD

In the news

Microsoft’s October Patch Batch Fixes 62 Flaws

Microsoft Issues Patches For Severe Flaws, Including Office Zero

October Patch Tuesday: 61 bugs and one zero-day fixed

Microsoft's October Patch Tuesday addresses critical Windows DNS client Zero

Microsoft Patch Tuesday

Bugs in Windows DNS client open millions of users to attack