CVE-2017-11847

highpriority · track · 33EPSS 0.065 · 94 %ileEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

6.46% (94th) EPSS

CVSS 9.3 · high

Is it mine?

24 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · scored 2026-10-28

Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to run arbitrary code in kernel mode, install programs, view, change or delete data, and create new accounts with full user rights due to improperly handing objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability".

cvss

Technical severity, 0–10. One row per scoring source.

9.3

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.09.3highAV:N/AC:M/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 8.6 · impact 10

v3.07.8highCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 1.8 · impact 5.9

v3.07.1highCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.17.8highAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-264US

affected products (24)

Products and version ranges known to be affected.

Microsoft Corporation Windows Kernel≤ Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709enisa_euvdEU
Microsoft Corp Windows 10all versionsfstec_bduRU
Microsoft Corp Windows 10 1511all versionsfstec_bduRU
Microsoft Corp Windows 10 1607all versionsfstec_bduRU
Microsoft Corp Windows 10 1709all versionsfstec_bduRU
Microsoft Corp Windows 7 Service Pack 1all versionsfstec_bduRU
Microsoft Corp Windows 8.1all versionsfstec_bduRU
Microsoft Corp Windows RT 8.1all versionsfstec_bduRU
Microsoft Corp Windows Server 2008 R2 Service Pack 1all versionsfstec_bduRU
Microsoft Corp Windows Server 2012all versionsfstec_bduRU
Microsoft Corp Windows Server 2012 R2all versionsfstec_bduRU
Microsoft Corp Windows Server 2016all versionsfstec_bduRU
microsoft windows 10all versionsnvdUScpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*
microsoft windows 10= 1511nvdUScpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*
microsoft windows 10= 1607nvdUScpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*
microsoft windows 10= 1703nvdUScpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*
microsoft windows 7all versionsnvdUScpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*
microsoft windows 8.1all versionsnvdUScpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*
microsoft windows rt 8.1all versionsnvdUScpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*
microsoft windows server 2008all versionsnvdUScpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*

showing 20 of 24

also known as (6)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

published 2017-11-15modified 2026-06-17

references (9)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan