CVE-2017-0158
First published: Wed Apr 12 2017(Updated: )
An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1 Windows RT 8.1, and Windows Server 2012 R2 fails to properly sanitize handles in memory, aka "Scripting Engine Memory Corruption Vulnerability."
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Windows 10 | ||
| Windows 10 | =1511 | |
| Windows 10 | =1607 | |
| Windows 10 | =1703 | |
| Microsoft Windows 7 | =sp1 | |
| Microsoft Windows | ||
| Microsoft Windows RT | ||
| Microsoft Windows Server | =sp2 | |
| Microsoft Windows Server | =r2-sp1 | |
| Microsoft Windows Server | ||
| Microsoft Windows Server | =r2 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Vista | =sp2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-0158?
CVE-2017-0158 has a severity rating that can allow attackers to gain elevated privileges on affected Microsoft Windows systems.
How do I fix CVE-2017-0158?
CVE-2017-0158 can be mitigated by applying the latest patches and updates provided by Microsoft for affected Windows versions.
What versions of Windows are affected by CVE-2017-0158?
CVE-2017-0158 affects Windows 10, Windows 8.1, Windows 7 SP1, and several versions of Windows Server including 2012 R2.
What type of vulnerability is CVE-2017-0158?
CVE-2017-0158 is categorized as an elevation of privilege vulnerability due to improper sanitization of handles in the Windows Scripting Engine.
Can CVE-2017-0158 be exploited remotely?
CVE-2017-0158 requires local access to the affected system to exploit the elevation of privilege capabilities.
- agent/type
- agent/references
- agent/author
- agent/remedy
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/windows 10
- version/windows 10/1511
- version/windows 10/1607
- version/windows 10/1703
- canonical/microsoft windows 7
- version/microsoft windows 7/sp1
- canonical/microsoft windows
- canonical/microsoft windows rt
- canonical/microsoft windows server
- version/microsoft windows server/sp2
- version/microsoft windows server/r2-sp1
- version/microsoft windows server/r2
- canonical/microsoft windows server 2016
- canonical/microsoft windows vista
- version/microsoft windows vista/sp2