CVE-2017-0158: High severity windows 10 vulnerability

Published Apr 12, 2017

Updated

An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1 Windows RT 8.1, and Windows Server 2012 R2 fails to properly sanitize handles in memory, aka "Scripting Engine Memory Corruption Vulnerability."

Affected Software

13 affected components

Microsoft Windows 10

Microsoft Windows 10=1511

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 7=sp1

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2008=sp2

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Microsoft Windows Vista=sp2

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0158

Event History

Apr 12, 2017

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-0158?

CVE-2017-0158 has a severity rating that can allow attackers to gain elevated privileges on affected Microsoft Windows systems.

How do I fix CVE-2017-0158?

CVE-2017-0158 can be mitigated by applying the latest patches and updates provided by Microsoft for affected Windows versions.

What versions of Windows are affected by CVE-2017-0158?

CVE-2017-0158 affects Windows 10, Windows 8.1, Windows 7 SP1, and several versions of Windows Server including 2012 R2.

What type of vulnerability is CVE-2017-0158?

CVE-2017-0158 is categorized as an elevation of privilege vulnerability due to improper sanitization of handles in the Windows Scripting Engine.

Can CVE-2017-0158 be exploited remotely?

CVE-2017-0158 requires local access to the affected system to exploit the elevation of privilege capabilities.