CVE-2017-8579

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

The DirectX component in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to run arbitrary code in kernel mode via a specially crafted application, aka "DirectX Elevation of Privilege Vulnerability."

Metrics

CVSS 3.0 7.0/10CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-281

Affected software

Vendor	Product	Versions
Microsoft Corporation	Microsoft Windows	Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016

References

http://www.securityfocus.com/bid/99212Third Party Advisory, VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8579Mitigation, Patch, Vendor Advisory
http://www.securityfocus.com/bid/99212Third Party Advisory, VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8579Mitigation, Patch, Vendor Advisory

Timeline

Published: Jun 29, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017