CVE-2017-0039: Microsoft Windows Server 2008

High severity, CVSS 7.8. EPSS: 37.4% chance of exploitation in the next 30 days.

Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle dynamic link library (DLL) loading, which allows local users to gain privileges via a crafted application, aka "Library Loading Input Validation Remote Code Execution Vulnerability."

Affected products

• Microsoft Windows Server 2008: any version
• Microsoft Windows Vista: any version

Published 2017-03-17. Last modified 2026-06-17.