CVE-2017-11771

The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly handle DNS responses, aka "Windows Search Remote Code Execution Vulnerability".

• CWE-20

• http://www.securityfocus.com/bid/101114Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039538Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11771Patch, Vendor Advisory
• http://www.securityfocus.com/bid/101114Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039538Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11771Patch, Vendor Advisory

Published

Oct 13, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-11766Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 170…
• CVE-2017-11767ChakraCore allows an attacker to gain the same user rights a…
• CVE-2017-11768Windows Media Player in Windows 7 SP1, Windows Server 2008 S…
• CVE-2017-11769The Microsoft Windows TRIE component on Microsoft Windows 10…
• CVE-2017-1177IBM BigFix Compliance 1.7 through 1.9.91 discloses sensitive…5.3
• CVE-2017-11770.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacke…
• CVE-2017-11772The Microsoft Windows Search component on Microsoft Windows …
• CVE-2017-11774Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and…7.8
• CVE-2017-11775Microsoft SharePoint Enterprise Server 2013 SP1 and Microsof…
• CVE-2017-11776Microsoft Outlook 2016 allows an attacker to obtain the emai…
• CVE-2017-11777Microsoft SharePoint Enterprise Server 2013 SP1 and Microsof…
• CVE-2017-11779The Microsoft Windows Domain Name System (DNS) DNSAPI.dll on…