CVE-2017-0147

ENISA EUVD: EUVD-2017-0514 ↗
Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero
Triaged: March 5, 2026 1 article

EPSS Score

Source: FIRST.org · 2026-05-24
92.8%
probability
This CVE has a 92.8% probability of being exploited in the next 30 days.
0% Top 99.8th percentile of all CVEs 100%

CVSS v3.1

Source: NVD
7.5
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Project Zero
Information leak in SMB transactions (EternalChampion)

Affected Products

Google Project Zero

Patched
March 14, 2017
Reported by
???
Root Cause Analysis
???

Signal Intelligence

Confidence
95%
EPSS 92.8%
CVSS v3.1 7.5
Mentions 1
Last Seen Jan 06, 2022

CNA Information

Analyst Note

Auto-imported from Google Project Zero — confirmed zero-day by definition.

Threat Actors 13

Cobalt
apt_group Financial crime 🇷🇺 RU
MALLARD SPIDER
apt_group Financial gain 🇷🇺 RU
FIN7
apt_group Financial crime 🇷🇺 RU
BelialDemon
apt_group 🇷🇺 RU
FusionCore
apt_group 🇪🇺 EU
The Shadow Brokers
apt_group 🇷🇺 RU
Ice Fog
apt_group Information theft and espionage 🇨🇳 CN
DNSpionage
apt_group Information theft and espionage 🇮🇷 IR
Silence group
apt_group Financial crime 🇷🇺 RU
NetTraveler
apt_group Information theft and espionage 🇨🇳 CN
Attor
apt_group 🇷🇺 RU
FunnyDream
apt_group Information theft and espionage 🇨🇳 CN
InvisiMole
apt_group Information theft and espionage 🇷🇺 RU

Triage Info

Decided atMar 05, 2026