CVE-2017-8466

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Windows Cursor in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows improper elevation of privilege, aka "Windows Cursor Elevation of Privilege Vulnerability".

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-281

Affected software

Vendor	Product	Versions
Microsoft Corporation	Windows Cursor	Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016

References

http://www.securityfocus.com/bid/98844Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038671Third Party Advisory, VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8466Patch, Vendor Advisory
http://www.securityfocus.com/bid/98844Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038671Third Party Advisory, VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8466Patch, Vendor Advisory

Timeline

Published: Jun 15, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017