CVE-2017-8543

ENISA EUVD: EUVD-2017-17493 ↗

Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero

Triaged: March 5, 2026 1 article

VulnLookup ↗ NVD ↗ EUVD ↗ MITRE ↗ Advisory ↗ P0 Sheet ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24

85.14%

probability

This CVE has a 85.14% probability of being exploited in the next 30 days.

0% Top 99.4th percentile of all CVEs 100%

CVSS v3.1

Source: NVD

9.8

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Project Zero

Buffer overflow in Windows Search CTableVariant

Affected Products

Attack Intelligence

CWE-281 · Improper Preservation of Permissions CWE-284 · Improper Access Control CWE-285 · Improper Authorization CWE-664 · Improper Control of a Resource Through its Lifetime CWE-668 · Exposure of Resource to Wrong Sphere CWE-732 · Incorrect Permission Assignment

Google Project Zero

Patched

June 13, 2017

Reported by

???

Root Cause Analysis

???

Microsoft Fixes 94 Security Issues in Massive June Update

Qualys Jun 13, 2017

Signal Intelligence

Confidenceⓘ

95%

EPSS 85.14%

CVSS v3.1 9.8

Mentions 1

Last Seen Jun 13, 2017

CNA Information

Analyst Note

Auto-imported from Google Project Zero — confirmed zero-day by definition.

Triage Info

Decided atMar 05, 2026