CVE-2017-11771

N/A

Published: October 13, 2017 at 01:00 PM UTC

Updated: June 17, 2026 at 01:02 AM UTC

8 products affected across 1 vendorWindows Server 2016Windows Server 2012Windows Server 2008

Using Windows Search by Microsoft Corporation?

Get instant alerts when new vulnerabilities affect Windows Search - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 52%

Description

The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly handle DNS responses, aka "Windows Search Remote Code Execution Vulnerability".

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Windows 10 · Microsoft

95%

1511 1607 1703

Windows 7 · Microsoft

95%

sp1

Windows 8-1 · Microsoft

95%

All versions

Windows Rt 8-1 · Microsoft

95%

All versions

Windows Server 2008 · Microsoft

95%

r2 sp1sp2

Windows Server 2012 · Microsoft

95%

Windows Server 2016 · Microsoft

95%

All versions

Windows · Microsoft

60%

Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016