What’s Vulnerable › Vulnerabilities

CVE-2017-8691

• Severity: high (CVSS 8.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 19.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-08-08 · updated 2026-06-17
• Weakness: CWE-119

Description

Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow an attacker to execute code remotely on a target system when the Windows font library fails to properly handle specially crafted embedded fonts, aka "Express Compressed Fonts Remote Code Execution Vulnerability."

Affected products

• Microsoft Windows 7: all versions
• Microsoft Windows Server 2008: r2-sp1
• Microsoft Corporation Windows Kernel-Mode Drivers: Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1

References

• http://www.securityfocus.com/bid/100090
• http://www.securitytracker.com/id/1039096
• https://fortiguard.com/zeroday/FG-VD-17-142
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8691
• http://www.securityfocus.com/bid/100090
• http://www.securitytracker.com/id/1039096
• https://fortiguard.com/zeroday/FG-VD-17-142
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8691

Get alerted when CVE-2017-8691 or the next vulnerability affects your stack