CVE-2017-0166

CVE-2017-0166 is an elevation of privilege vulnerability in Windows LDAP, affecting various versions from Vista to Windows 10 and Server 2016. It arises from improper calculation of LDAP request buffer lengths. With a CVSS score of 8.1 (High), a remote attacker could exploit this by sending specially crafted traffic to a Domain Controller, leading to high impact on confidentiality, integrity, and availability. While the vulnerability has a high severity and community discussion, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or KEV listing.