CVE-2017-8591 — Corporation Windows Shell vulnerability

5 documents4 sources
Severity
7.8HIGHNVD
EPSS
3.1%
top 13.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
17
Microsoft Corporation Windows ShellMicrosoft Windows 10Microsoft Windows Server 2012+14 more
Timeline
PublishedAug 8
Latest updateMay 13

Description

Windows Input Method Editor (IME) in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an remote code execution vulnerability when it fails to properly handle objects in memory, aka "Windows IME Remote Code Execution Vulnerability".

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages17 packages

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-phgj-7rc6-g54r: Windows Input Method Editor (IME) in Windows 8↗2022-05-13
▶

📋Vendor Advisories

1
Microsoft
Windows IME Remote Code Execution Vulnerability↗2017-08-08
▶

🕵️Threat Intelligence

2
Talos
Microsoft Patch Tuesday - August 2017↗2017-08-08
▶
Talos
Microsoft Patch Tuesday - August 2017↗2017-08-08
▶
CVE-2017-8591 — Corporation Windows Shell vulnerability | cvebase