CVE-2017-8590: High severity windows 10 vulnerability

Published Jul 11, 2017

Updated

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way that the Windows Common Log File System (CLFS) driver handles objects in memory, aka "Windows CLFS Elevation of Privilege Vulnerability".

Affected Software

12 affected components

Microsoft Windows 10

Microsoft Windows 10=1511

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 7=sp1

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2008=sp2

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8590

Event History

Jul 11, 2017

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-8590?

CVE-2017-8590 has been rated with a critical severity level due to its potential for elevation of privilege.

What versions of Windows are affected by CVE-2017-8590?

CVE-2017-8590 affects several versions including Windows 7 SP1, Windows Server 2008 SP2, Windows 8.1, Windows 10 Gold and later, and Windows Server 2016.

How do I fix CVE-2017-8590?

To fix CVE-2017-8590, you should apply the latest security updates from Microsoft for the affected versions of Windows.

What type of vulnerability is CVE-2017-8590?

CVE-2017-8590 is an elevation of privilege vulnerability that allows an attacker to gain higher privileges on the system.

Can CVE-2017-8590 be exploited remotely?

CVE-2017-8590 requires local access to the system, so it cannot be exploited remotely.