What is the severity of CVE-2017-8474?

CVE-2017-8474 has a critical severity rating due to the potential for information disclosure by an authenticated attacker.

How do I fix CVE-2017-8474?

To fix CVE-2017-8474, you should apply the latest security updates provided by Microsoft for your affected Windows version.

What versions of Windows are affected by CVE-2017-8474?

CVE-2017-8474 affects several Windows versions including Windows 7 SP1, Windows 8.1, various Windows 10 releases, and several versions of Windows Server.

Can CVE-2017-8474 be exploited remotely?

CVE-2017-8474 requires authentication for exploitation, meaning an attacker must have valid credentials to leverage the vulnerability.

What is the attack vector for CVE-2017-8474?

The attack vector for CVE-2017-8474 involves using a specially crafted application to gain unauthorized access to sensitive information.

Vulnerability/
CVE-2017-8474

medium

CWE

200

15/6/2017

5/8/2024

CVE-2017-8474: Infoleak

First published: Thu Jun 15 2017(Updated: )

The kernel in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Windows Kernel Information Disclosure Vulnerability," a different vulnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8476, CVE-2017-8469, CVE-2017-8462, CVE-2017-0300, CVE-2017-0299, and CVE-2017-0297.

Credit: secure@microsoft.com

Affected Software	Affected Version	How to fix
Windows 10	=1511
Windows 10	=1607
Windows 10	=1703
Microsoft Windows 7	=sp1
Microsoft Windows
Microsoft Windows	=rt
Microsoft Windows Server	=r2
Microsoft Windows Server	=r2-sp1
Microsoft Windows Server
Microsoft Windows Server	=r2
Microsoft Windows Server 2016

Remedy

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8474

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2017-8474?
CVE-2017-8474 has a critical severity rating due to the potential for information disclosure by an authenticated attacker.
How do I fix CVE-2017-8474?
To fix CVE-2017-8474, you should apply the latest security updates provided by Microsoft for your affected Windows version.
What versions of Windows are affected by CVE-2017-8474?
CVE-2017-8474 affects several Windows versions including Windows 7 SP1, Windows 8.1, various Windows 10 releases, and several versions of Windows Server.
Can CVE-2017-8474 be exploited remotely?
CVE-2017-8474 requires authentication for exploitation, meaning an attacker must have valid credentials to leverage the vulnerability.
What is the attack vector for CVE-2017-8474?
The attack vector for CVE-2017-8474 involves using a specially crafted application to gain unauthorized access to sensitive information.

agent/type
agent/references
agent/author
agent/description
agent/severity
agent/weakness
agent/remedy
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/first-publish-date
agent/event
agent/source
agent/softwarecombine
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/microsoft
canonical/windows 10
version/windows 10/1511
version/windows 10/1607
version/windows 10/1703
canonical/microsoft windows 7
version/microsoft windows 7/sp1
canonical/microsoft windows
version/microsoft windows/rt
canonical/microsoft windows server
version/microsoft windows server/r2
version/microsoft windows server/r2-sp1
canonical/microsoft windows server 2016