High severity7.8NVD Advisory· Published Oct 13, 2017· Updated Jun 17, 2026

CVE-2017-11782

Description

The Microsoft Server Block Message (SMB) on Microsoft Windows 10 1607 and Windows Server 2016, allows an elevation of privilege vulnerability when an attacker sends specially crafted requests to the server, aka "Windows SMB Elevation of Privilege Vulnerability".

Affected products

Microsoft/Windows 10 1909
cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
Microsoft/Windows Server 2016
cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
Microsoft/Windowsllm-fuzzy
Range: 10 1607, Windows Server 2016
Microsoft/Server Message Blockllm-fuzzy
Range: 10 1607, Windows Server 2016
Microsoft Corporation/Server Block Message (SMB)v5
Range: Microsoft Windows 10 1607 and Windows Server 2016

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11782nvdPatchVendor Advisory
www.securityfocus.com/bid/101143nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1039528nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000