CVE-2017-8494

Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a locally-authenticated attacker to run a specially crafted application on a targeted system when Windows Secure Kernel Mode fails to properly handle objects in memory, aka "Windows Elevation of Privilege Vulnerability".

• CWE-281

• http://www.securityfocus.com/bid/98855Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8494Patch, Vendor Advisory
• http://www.securityfocus.com/bid/98855Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8494Patch, Vendor Advisory

Published

Jun 15, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-8488The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, …
• CVE-2017-8489The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, …
• CVE-2017-8490The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, …
• CVE-2017-8491The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, …
• CVE-2017-8492The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, …
• CVE-2017-8493Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 201…
• CVE-2017-8495Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1,…
• CVE-2017-8496Microsoft Edge in Windows 10 1607 and Windows Server 2016 al…
• CVE-2017-8497Microsoft Edge in Windows 10 1607 and Windows Server 2016 al…
• CVE-2017-8498Microsoft Edge in Windows 10 1607 and 1703, and Windows Serv…
• CVE-2017-8499Microsoft Edge in Windows 10 1703 allows an attacker to exec…
• CVE-2017-8501Microsoft Office allows a remote code execution vulnerabilit…