CVE-2017-0164: Microsoft Windows 10

Medium severity, CVSS 4.4. EPSS: 3.9% chance of exploitation in the next 30 days.

A denial of service vulnerability exists in Windows 10 1607 and Windows Server 2016 Active Directory when an authenticated attacker sends malicious search queries, aka "Active Directory Denial of Service Vulnerability."

Affected products

• Microsoft Windows 10: version 1607 only
• Microsoft Windows Server 2016: any version

Published 2017-04-12. Last modified 2026-06-17.