CVE-2017-8589
Critical · 9.8CVSS
9.8
EPSS
26.2%
Published
Jul 11, 2017
CISA due date
—
The record
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way that Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulnerability".
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-61709 OpenFGA is an authorization and permission engine built for developers. CWE-281
- CVE-2026-58510 GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code… CWE-281
- CVE-2026-23556 When oxenstored is tearing a domain down, the node data is cleaned up but the usage… CWE-281
- CVE-2026-58494 Wasmtime is a runtime for WebAssembly. CWE-281
- CVE-2026-4360 In the Tarfile.extract() function, the filter parameter is not passed properly when… CWE-281
- CVE-2026-40767 Unauthenticated Broken Access Control in wpForo Forum < 3.0.2 versions. CWE-281
- CVE-2024-47270 Improper preservation of permissions vulnerability in Archiving Push functionality in… CWE-281
- CVE-2026-44832 Snipe-IT is an IT asset/license management system. CWE-281