{
  "cveId": "CVE-2017-8714",
  "url": "https://patchblox.com/security/cve/CVE-2017-8714",
  "summary": "CVE-2017-8714 is fixed in 8 products on 1 platform, first by KB4038782, released September 12, 2017. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Remote Desktop Virtual Host Remote Code Execution Vulnerability",
  "description": "\u003Cp\u003EA remote code execution vulnerability exists in the VM Host Agent Service of Remote Desktop Virtual Host role when it fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could issue a specially crafted certificate on the guest operating system that could cause the VM host agent service on the host operating system to execute arbitrary code. The Remote Desktop Virtual Host role is not enabled by default.\u003C/p\u003E\n\u003Cp\u003EAn attacker who successfully exploited the vulnerability could execute arbitrary code on the host operating system.\u003C/p\u003E\n\u003Cp\u003EThe security update addresses the vulnerability by correcting how VM host agent service validates guest operating system user input.\u003C/p\u003E",
  "published": "2017-09-12T07:00:00Z",
  "severity": "Important",
  "cvss": 7.8,
  "epss": 0.03766,
  "epssPercentile": 0.89966,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "exploitabilityAssessment": "Exploitation Less Likely",
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-8714",
  "fixes": [
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1607 for x64-based Systems",
      "fixedVersion": "14393.1715",
      "fix": "KB4038782",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038782",
      "released": "2017-09-12T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 8.1 for x64-based systems",
      "fixedVersion": "",
      "fix": "KB4038792",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038792",
      "released": "2017-09-12T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 8.1 for x64-based systems",
      "fixedVersion": "",
      "fix": "KB4038793",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038793",
      "released": "2017-09-12T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2012",
      "fixedVersion": "",
      "fix": "KB4038786",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038786",
      "released": "2017-09-12T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2012",
      "fixedVersion": "",
      "fix": "KB4038799",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038799",
      "released": "2017-09-12T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2012 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB4038786",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038786",
      "released": "2017-09-12T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2012 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB4038799",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038799",
      "released": "2017-09-12T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2012 R2",
      "fixedVersion": "",
      "fix": "KB4038792",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038792",
      "released": "2017-09-12T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2012 R2",
      "fixedVersion": "",
      "fix": "KB4038793",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038793",
      "released": "2017-09-12T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2012 R2 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB4038792",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038792",
      "released": "2017-09-12T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2012 R2 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB4038793",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038793",
      "released": "2017-09-12T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2016",
      "fixedVersion": "14393.1715",
      "fix": "KB4038782",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038782",
      "released": "2017-09-12T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2016 (Server Core installation)",
      "fixedVersion": "14393.1715",
      "fix": "KB4038782",
      "url": "https://patchblox.com/security/fix/microsoft/kb4038782",
      "released": "2017-09-12T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T12:40:37Z"
}