CVE-2017-11782

HIGH

Microsoft Windows 10 1607 & Windows Server 2016 - Privilege Escalation

Title source: llm
STIX 2.1

Description

The Microsoft Server Block Message (SMB) on Microsoft Windows 10 1607 and Windows Server 2016, allows an elevation of privilege vulnerability when an attacker sends specially crafted requests to the server, aka "Windows SMB Elevation of Privilege Vulnerability".

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1039528
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/101143

Scores

CVSS v3 7.8
EPSS 0.0072
EPSS Percentile 72.8%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-20
Status published
Products (3)
microsoft/windows_10 1607
microsoft/windows_server_2016
Microsoft Corporation/Server Block Message (SMB) Microsoft Windows 10 1607 and Windows Server 2016
Published Oct 13, 2017
Tracked Since Feb 18, 2026