Medium severity4.4NVD Advisory· Published Apr 12, 2017· Updated Jun 17, 2026

CVE-2017-0164

Description

A denial of service vulnerability exists in Windows 10 1607 and Windows Server 2016 Active Directory when an authenticated attacker sends malicious search queries, aka "Active Directory Denial of Service Vulnerability."

Affected products

Microsoft/Windows 10 1909
cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
Microsoft/Windows Server 20162 versions
cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
- (no CPE)range: Active Directory
Microsoft/Active Directory Servicesllm-create
Range: Windows 10 1607, Windows Server 2016
Microsoft/Windows 10 1809llm-fuzzy
Range: 1607
Microsoft Corporation/Active Directoryv5
Range: Windows 10 1607 and Windows Server 2016

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0164nvdPatchVendor Advisory
www.securityfocus.com/bid/97448nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1038235nvd

News mentions

No linked articles in our index yet.

cvss	0.286
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000