CVE-2017-7293

The Dolby DAX2 and DAX3 API services are vulnerable to a privilege escalation vulnerability that allows a normal user to get arbitrary system privileges, because these services have .NET code for DCOM. This affects Dolby Audio X2 (DAX2) 1.0, 1.0.1, 1.1, 1.1.1, 1.2, 1.3, 1.3.1, 1.3.2, 1.4, 1.4.1, 1.4.2, 1.4.3, and 1.4.4 and Dolby Audio X3 (DAX3) 1.0 and 1.1. An example affected driver is Realtek Audio Driver 6.0.1.7898 on a Lenovo P50.

• CWE-502

• https://bugs.chromium.org/p/project-zero/issues/detail?id=1075Issue Tracking, Third Party Advisory
• https://www.exploit-db.com/exploits/41933/Exploit, Third Party Advisory, VDB Entry
• https://bugs.chromium.org/p/project-zero/issues/detail?id=1075Issue Tracking, Third Party Advisory
• https://www.exploit-db.com/exploits/41933/Exploit, Third Party Advisory, VDB Entry

Published

Apr 26, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7283An authenticated user of Unitrends Enterprise Backup before …
• CVE-2017-7284An attacker that has hijacked a Unitrends Enterprise Backup …
• CVE-2017-7285A vulnerability in the network stack of MikroTik Version 6.3…
• CVE-2017-7286Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-7288Cross-site scripting (XSS) vulnerability in Zimbra Collabora…
• CVE-2017-7290SQL injection vulnerability in XOOPS 2.5.7.2 and other versi…
• CVE-2017-7294The vmw_surface_define_ioctl function in drivers/gpu/drm/vmw…7.8
• CVE-2017-7295An issue was discovered in Contiki Operating System 3.0. A u…
• CVE-2017-7296An issue was discovered in Contiki Operating System 3.0. A P…
• CVE-2017-7297Rancher Labs rancher server 1.2.0+ is vulnerable to authenti…8.8
• CVE-2017-7298In Moodle 3.2.2+, there is XSS in the Course summary filter …
• CVE-2017-7299The Binary File Descriptor (BFD) library (aka libbfd), as di…