VDB

CVE-2017-0292

CVE-2017-0292 PUBLISHED

Reported by microsoft · Published June 15, 2017

Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows remote code execution if a user opens a specially crafted PDF file, aka "Windows PDF Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0291.

Affected products

VendorProductVersions
Microsoft CorporationWindows PDFWindows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
Microsoft CorporationWindows PDFWindows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016

Timeline

  • Jun 14, 2017 CVE Published
  • Apr 14, 2021 EPSS Score (30 in total, the first dated here)
  • Mar 30, 2026 Security Advisory (4 in total, the first dated here)
  • Jun 17, 2026 CVE Updated
  • Oct 5, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2017-0292
vulnetix vdb fixes CVE-2017-0292

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2017-0292/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

  • 98836 vdb-entryx_refsource_BID
  • x_refsource_CONFIRM
  • 1038678 vdb-entryx_refsource_SECTRACK
Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›