CVE-2017-0293

Microsoft Windows PDF Library in Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012...

7.5 High

CVE-2017-0293 is a high vulnerability (CVSS 7.5) in Microsoft Windows 10, published August 8, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 14.4%, the 96th percentile. No source names a fixed version.

Microsoft Windows PDF Library in Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability when it improperly handles objects in memory, aka "Windows PDF Remote Code Execution Vulnerability".

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

14.4%Down 3.1 points since Aug 1, 2021

What each source reports

NVD Score used 7.5

Record: CVE-2017-0293
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0: 7.6 HighAV:N/AC:H/Au:N/C:C/I:C/A:C
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Record: CVE-2017-0293
Updated: 2026-11-02

EUVDEUVD-2017-0649 No score

Record: EUVD-2017-0649
Updated: 2026-11-03

GitHub AdvisoriesGHSA-692c-vj4g-4ghr 7.5

Microsoft Windows PDF Library in Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012...

Record: GHSA-692c-vj4g-4ghr
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-119
Updated: 2026-11-02

Affected products

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD