CVE-2017-0295

MEDIUM

Microsoft Windows <10.0 - Privilege Escalation

Title source: llm

Description

Microsoft Windows 10 1607 and 1703, and Windows Server 2016 allow an authenticated attacker to modify the C:\Users\DEFAULT folder structure, aka "Windows Default Folder Tampering Vulnerability".

References (3)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/98904

[Patch, Vendor Advisory] https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0295

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1038674

Scores

CVSS v3 5.5

EPSS 0.0053

EPSS Percentile 66.9%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Details

Status published

Products (4)

microsoft/windows_10

microsoft/windows_server_2016

Microsoft Corporation/Microsoft Windows < Microsoft Windows 10 1607 and 1703, and Windows Server 2016.

Published Jun 15, 2017

Tracked Since Feb 18, 2026