# CVE-2017-8543

Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to take control of the affected system when Windows Search fails to handle objects in memory, aka "Windows Search Remote Code Execution Vulnerability".

- Page: https://www.vulneraibility.com/cve/CVE-2017-8543
- CVSS: 9.8
- Known exploited: yes, in CISA KEV since 2022-05-24; CISA due date 2022-06-14
- EPSS: 74.16% (percentile 99.5)
- Unvetted proof-of-concept code on GitHub: 1 GitHub proof of concept (first 2017-06-19)
- CISA SSVC: exploitation active, automatable yes, technical impact total (assessed 2025-02-10)
- Weakness: CWE-281
- Published: 2017-06-15

## Affected versions

- Microsoft Corporation Microsoft Windows: affected Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] http://www.securityfocus.com/bid/98824
- [other] https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8543
- [other] http://www.securitytracker.com/id/1038667
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-8543

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.