What is the CVSS score of CVE-2017-15303?

CVE-2017-15303 has a CVSS 3.0 base score of 7.8 (High). CVSS vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 1.0%.

Which versions of In CPUID CPU-Z are affected by CVE-2017-15303?

Organizations using CPUID CPU-Z face notable risk from CVE-2017-15303, a out-of-bounds write vulnerability rated CVSS 7.8.

How to fix or mitigate CVE-2017-15303?

Within 24 hours: Identify all affected systems running CPUID CPU-Z and apply vendor patches immediately. If patching is delayed, consider network segmentation to limit exposure.

In CPUID CPU-Z CVE-2017-15303

HIGH

Out-of-bounds Write (CWE-787)

2017-10-16 cve@mitre.org

Buffer Overflow Memory Corruption

7.8

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 26, 2026 - 11:18 vuln.today

CVE Published

Oct 16, 2017 - 01:29 nvd

HIGH 7.8

DescriptionCVE.org

In CPUID CPU-Z before 1.43, there is an arbitrary memory write that results directly in elevation of privileges, because any program running on the local machine (while CPU-Z is running) can issue an ioctl 0x9C402430 call to the kernel-mode driver (e.g., cpuz141_x64.sys for version 1.41).

AnalysisAI

Technical ContextAI

An out-of-bounds memory access occurs when code reads from or writes to memory locations outside the intended buffer boundaries. This vulnerability is classified as Out-of-bounds Write (CWE-787).