NVD disclosure day

Published threat advisories for June 15, 2017

CVE-2017-8543

Windows Search Remote Code Execution Vulnerability.

Halo Surface Signal: 2 out of 5 — less likely to be public-facing.

A flaw in Windows Search allows attackers to take control of affected systems by exploiting how the component handles memory objects. This poses a risk of unauthorized access and potential disruption to business operations and data.

NVD published: June 15, 2017 • CISA KEV

CVE advisoryKnown Exploit

CVE-2017-8464

Microsoft Windows Shell Shortcut File Vulnerability

Halo Surface Signal: 2 out of 5 — less likely to be public-facing.

Windows systems have a vulnerability in the Shell component that allows code execution via crafted shortcut files. This impacts systems displaying .LNK file icons, posing a risk of unauthorized code execution. The realistic business risk involves potential system compromise.

NVD published: June 15, 2017 • CISA KEV