Unscored CVE-2017-0295 EUVD-2017-0651GHSA-mxrv-wg7h-r74h

Microsoft Windows 10 1607 and 1703, and Windows Server 2016 allow an authenticated attacker to modify the C:\Users\DEFAULT folder structure…

Published Jun 15, 2017 · Updated Aug 5, 2024 · Assigned by microsoft

Vendor: Microsoft Product: Microsoft Windows Platform: Windows

Description

Microsoft Windows 10 1607 and 1703, and Windows Server 2016 allow an authenticated attacker to modify the C:\Users\DEFAULT folder structure, aka "Windows Default Folder Tampering Vulnerability".

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Microsoft Windows	Microsoft Windows 10 1607 and 1703, and Windows Server 2016.	—

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0295
98904 vdb-entry
1038674 vdb-entry