vulnerability

Microsoft Windows: CVE-2017-11771: Windows Search Remote Code Execution Vulnerability

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
10	(AV:N/AC:L/Au:N/C:C/I:C/A:C)	Oct 10, 2017	Oct 10, 2017	Sep 5, 2025

Severity

CVSS

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Published

Oct 10, 2017

Added

Oct 10, 2017

Modified

Sep 5, 2025

Description

The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly handle DNS responses, aka "Windows Search Remote Code Execution Vulnerability".

Solutions

microsoft-windows-windows_10-1507-kb4042895microsoft-windows-windows_10-1511-kb4041689microsoft-windows-windows_10-1607-kb4041691microsoft-windows-windows_10-1703-kb4041676microsoft-windows-windows_server_2012-kb4041679microsoft-windows-windows_server_2012_r2-kb4041687microsoft-windows-windows_server_2016-1607-kb4041691msft-kb4041678-45ea4c02-1f47-4865-a9a8-e3e12a123abdmsft-kb4041678-542b51ca-2e40-4c7c-b1f6-113dd3ad3fc2msft-kb4041678-ab110ea9-218e-41f7-b51b-af6fba0a726fmsft-kb4041678-abc11d4b-adbb-47e6-af90-b9864891d46cmsft-kb4041678-cea9a334-2c33-4b56-ba35-b5a1b89793b2msft-kb4041678-eb5e144d-d861-46b4-9fc4-251917ea63admsft-kb4041679-4aa7d02c-1328-4f53-b136-faf79e2475c8msft-kb4041679-72b1b537-615d-4b25-b7e7-34350dcd0aabmsft-kb4041687-092e7af4-3dd9-4daf-b99f-27b776380751msft-kb4041687-92b0c4d3-a90b-4879-ba50-5542e1183bafmsft-kb4042067-6047fa2c-91fa-4fad-a65e-f49d0552df24msft-kb4042067-81a7a764-a81f-430d-a98d-7cd769eca3abmsft-kb4042067-f20d8095-41ff-407b-a313-151ea3cf6b8f

References

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today