CVE-2017-8466

7.8 highEPSS 1.1%

Windows Cursor in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows improper elevation of privilege, aka "Windows Cursor Elevation of Privilege Vulnerability".

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-281
Published: 2017-06-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_10
microsoft:windows_8.1
microsoft:windows_rt_8.1
microsoft:windows_server_2012
microsoft:windows_server_2016

References

http://www.securityfocus.com/bid/98844
http://www.securitytracker.com/id/1038671
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8466
http://www.securityfocus.com/bid/98844
http://www.securitytracker.com/id/1038671

Check your stack JSON