VIR Vulnerability Intelligence Relay

CVE-2017-11850

low
Published 2017-11-15 · Modified 2026-05-13
CVSS v3
2.5
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v2
1.9
VIR risk
2.5

Description

Microsoft Graphics Component in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to log on to an affected system and run a specially crafted application due to improper handling of objects in memory, aka "Microsoft Graphics Component Information Disclosure Vulnerability".

Predictions

Exploit likelihood
27%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: secure@microsoft.com — https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11850

OS impact
OSVersionStatusFixed in
windows windows-affected
windows windows1511affected
windows windows1607affected
windows windows1703affected
windows windows1709affected
windows windowsaffected
windows windowsr2affected

References

CWEs

CWE-200

Verify integrity in audit chain (admin only). AS-IS.