A denial of service vulnerability exists in Active Directory when an authenticated attacker sends malicious search queries. An attacker who successfully exploited this vulnerability could cause the Active Directory service to become nonresponsive.
To exploit this vulnerability, an attacker must have valid credentials. An attacker could exploit this vulnerability by sending malicious search queries, resulting in denial of service.
The update addresses the vulnerability by correcting how search queries are processed.
## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Microsoft | Windows 10 Version 1607 for 32-bit Systems | | [KB4015217](https://patchblox.com/security/data/fix/microsoft/kb4015217.md) | Apr 11, 2017 | | Microsoft | Windows 10 Version 1607 for x64-based Systems | | [KB4015217](https://patchblox.com/security/data/fix/microsoft/kb4015217.md) | Apr 11, 2017 | | Microsoft | Windows Server 2016 | | [KB4015217](https://patchblox.com/security/data/fix/microsoft/kb4015217.md) | Apr 11, 2017 | | Microsoft | Windows Server 2016 (Server Core installation) | | [KB4015217](https://patchblox.com/security/data/fix/microsoft/kb4015217.md) | Apr 11, 2017 | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo