CVE-2017-11769
TRIE Remote Code Execution Vulnerability
CVE-2017-11769 is fixed in 10 products on 1 platform, first by KB4041689, released October 10, 2017. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
4.2
Important
Exploitation
None reported
Exploitation Less Likely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.1960
97th percentile
<p>A remote code execution vulnerability exists in the way that certain Windows components handle the loading of DLL files. An attacker who successfully exploited this vulnerability could take complete control of an affected system.</p> <p>An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Microsoft | |||
| Windows 10 Version 1511 for 32-bit Systems | 10586.1176 | KB4041689 | Oct 10, 2017 |
| Windows 10 Version 1511 for x64-based Systems | 10586.1176 | KB4041689 | Oct 10, 2017 |
| Windows 10 Version 1607 for 32-bit Systems | 14393.1770 | KB4041691 | Oct 10, 2017 |
| Windows 10 Version 1607 for x64-based Systems | 14393.1770 | KB4041691 | Oct 10, 2017 |
| Windows 10 Version 1703 for 32-bit Systems | 15063.674 | KB4041676 | Oct 10, 2017 |
| Windows 10 Version 1703 for x64-based Systems | 15063.674 | KB4041676 | Oct 10, 2017 |
| Windows 10 for 32-bit Systems | 10240.17643 | KB4042895 | Oct 10, 2017 |
| Windows 10 for x64-based Systems | 10240.17643 | KB4042895 | Oct 10, 2017 |
| Windows Server 2016 | 14393.1770 | KB4041691 | Oct 10, 2017 |
| Windows Server 2016 (Server Core installation) | 14393.1770 | KB4041691 | Oct 10, 2017 |