CVE-2017-8589

CVE-2017-8589 is a critical remote code execution vulnerability affecting multiple versions of Microsoft Windows and Windows Server, stemming from how Windows Search handles objects in memory. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with low complexity, allowing an unauthenticated attacker to achieve full compromise of confidentiality, integrity, and availability. While it has a high FAUCET Risk Score and notable community discussion, there is currently no evidence of active exploitation, nor are there public Metasploit, Nuclei, or ExploitDB modules available. Despite its age, the vulnerability received significant media coverage at the time of its disclosure.