Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.1

Windows 7/8.1/10 and Server can grant attacker admin rights

CVE-2017-8563 · published 9 years ago
Summary

Several Windows versions, including Windows 7, 8.1, 10 and related Server editions, may fall back to an older authentication method that can be abused to raise privileges. This means a malicious user could gain administrator-level access on an affected system. Apply the latest security updates from Microsoft as soon as possible to stop the fallback behavior.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
microsoft windows_10 1511
1607
1703
cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
microsoft windows_7 All versions
cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*
microsoft windows_8.1 All versions
cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*
microsoft windows_rt_8.1 All versions
cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*
microsoft windows_server_2008 r2
cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*
microsoft windows_server_2012 r2
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
microsoft windows_server_2016 All versions
cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
Original advisory text
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevati...
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Kerberos falling back to NT LAN Manager (NTLM) Authentication Protocol as the default authentication protocol, aka "Windows Elevation of Privilege Vulnerability".
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
8.1 High
Exploitation
7% chance of attack within 30 days
Type
CWE-281Improper Preservation of Permissions
Timeline
Published11 Jul 2017
Updated15 Oct 2026
First seen29 Sep 2026
Sources
CVE-2017-8563 · NVD
Track software like this
Free during beta