CVE-2017-8528

N/A

Published: June 15, 2017 at 01:00 AM UTC

Updated: June 17, 2026 at 01:26 AM UTC

7 products affected across 1 vendorWindows Server 2012Windows Server 2008Windows 7

Using Uniscribe by Microsoft Corporation?

Get instant alerts when new vulnerabilities affect Uniscribe - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 20%

Description

Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016, Microsoft Office 2007 SP3, and Microsoft Office 2010 SP2 allows a remote code execution vulnerability due to the way it handles objects in memory, aka "Windows Uniscribe Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0283.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Office · Microsoft

95%

2007 sp3 2010 sp2

Windows 7 · Microsoft

95%

sp1

Windows 8-1 · Microsoft

95%

All versions

Windows Rt 8-1 · Microsoft

95%

All versions

Windows Server 2008 · Microsoft

95%

r2 sp1sp2

Windows Server 2012 · Microsoft

95%

Windows · Microsoft

60%

Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016, Microsoft Office 2007 SP3, and Microsoft Office 2010 SP2.