CVE-2017-8620

Windows Search in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it improperly handles objects in memory, aka "Windows Search Remote Code Execution Vulnerability".

• CWE-119

• http://www.securityfocus.com/bid/100034Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039091Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8620Patch, Vendor Advisory
• https://threatpost.com/windows-search-bug-worth-watching-and-squashing/127434/Third Party Advisory
• http://www.securityfocus.com/bid/100034Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039091Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8620Patch, Vendor Advisory
• https://threatpost.com/windows-search-bug-worth-watching-and-squashing/127434/Third Party Advisory

Published

Aug 8, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-8610Microsoft Edge in Microsoft Windows 10 1703 allows an attack…
• CVE-2017-8611Microsoft Edge on Microsoft Windows 10 Gold, 1511, 1607, and…
• CVE-2017-8613Azure AD Connect Password writeback, if misconfigured during…
• CVE-2017-8617Microsoft Edge in Windows 10 1703 Microsoft Edge allows a re…
• CVE-2017-8618Internet Explorer in Microsoft Windows 7 SP1, Windows Server…
• CVE-2017-8619Microsoft Edge on Windows 10 Gold, 1511, 1607, and 1703, and…
• CVE-2017-8621Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3…
• CVE-2017-8622Windows Subsystem for Linux in Windows 10 1703 allows an ele…
• CVE-2017-8623Windows Hyper-V in Windows 10 1607, 1703, and Windows Server…
• CVE-2017-8624CLFS in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, W…
• CVE-2017-8625Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and …
• CVE-2017-8627Windows Subsystem for Linux in Windows 10 1703, allows a den…