{"id":"CVE-2017-11782","aliases":["EUVD-2017-3390","GHSA-mpc8-f6h2-689c"],"status":"published","title":"The Microsoft Server Block Message (SMB) on Microsoft Windows 10 1607 and Windows Server 2016,...","description":"The Microsoft Server Block Message (SMB) on Microsoft Windows 10 1607 and Windows Server 2016, allows an elevation of privilege vulnerability when an attacker sends specially crafted requests to the server, aka \"Windows SMB Elevation of Privilege Vulnerability\".","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0117,"percentile":0.67629,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2017-10-13T13:00:00Z","modified":"2026-06-17T01:02:21Z","products":[{"vendor":"microsoft","product":"windows_10"},{"vendor":"microsoft","product":"windows_server_2016"},{"vendor":"microsoft corporation","product":"server block message (smb)"}],"references":[{"url":"http://www.securitytracker.com/id/1039528","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/101143","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11782","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11782"},{"url":"https://github.com/advisories/GHSA-mpc8-f6h2-689c"}],"sources":{"cve":[{"id":"CVE-2017-11782","description":"The Microsoft Server Block Message (SMB) on Microsoft Windows 10 1607 and Windows Server 2016, allows an elevation of privilege vulnerability when an attacker sends specially crafted requests to the server, aka \"Windows SMB Elevation of Privilege Vulnerability\".","status":"published","published":"2017-10-13T13:00:00Z","modified":"2024-09-16T19:25:46.01Z","updated_at":"2026-11-02T14:33:19.848632Z"}],"euvd":[{"id":"EUVD-2017-3390","description":"The Microsoft Server Block Message (SMB) on Microsoft Windows 10 1607 and Windows Server 2016, allows an elevation of privilege vulnerability when an attacker sends specially crafted requests to the server, aka \"Windows SMB Elevation of Privilege Vulnerability\".","status":"published","published":"2017-10-13T13:00:00Z","modified":"2024-09-16T19:25:46Z","updated_at":"2026-11-03T00:55:22.776544Z"}],"ghsa":[{"id":"GHSA-mpc8-f6h2-689c","title":"The Microsoft Server Block Message (SMB) on Microsoft Windows 10 1607 and Windows Server 2016,...","description":"The Microsoft Server Block Message (SMB) on Microsoft Windows 10 1607 and Windows Server 2016, allows an elevation of privilege vulnerability when an attacker sends specially crafted requests to the server, aka \"Windows SMB Elevation of Privilege Vulnerability\".","status":"published","published":"2022-05-13T01:42:34Z","modified":"2023-02-02T05:00:46Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:51:02.304407Z"}],"nvd":[{"id":"CVE-2017-11782","description":"The Microsoft Server Block Message (SMB) on Microsoft Windows 10 1607 and Windows Server 2016, allows an elevation of privilege vulnerability when an attacker sends specially crafted requests to the server, aka \"Windows SMB Elevation of Privilege Vulnerability\".","status":"published","published":"2017-10-13T13:29:00.677Z","modified":"2026-06-17T01:02:21.693Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:04:01.734197Z"}]}}