⚠ Actively exploited
Added to CISA KEV on 2022-02-25. Federal agencies required to patch by 2022-08-25. Required action: Apply updates per vendor instructions..

CVE-2017-0222 — Out-of-bounds Write in Corporation Internet Explorer

CWE-787 — Out-of-bounds WriteCWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer15 documents8 sources
Severity
8.8HIGHNVD
NVD7.5
EPSS
62.0%
top 1.65%
CISA KEV
KEV
Added 2022-02-25
Due 2022-08-25
Exploit
Exploited in wild
Active exploitation observed
Affected products
2
Microsoft Corporation Internet ExplorerMicrosoft Internet Explorer
Timeline
PublishedMay 12
KEV addedFeb 25
Latest updateMay 17
KEV dueAug 25
CISA Required Action: Apply updates per vendor instructions.

Description

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0226.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5microsoft_corporation/internet_explorerWindows 8.1 for 32-bit systems, Windows 8.1 for x64-based systems, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, Windows 10 for 32-bit Systems, Windows 10 for x64-based Systems, Windows 10 Version 1511 for 32-bit Systems, Windows 10 Version 1511 for x64-based Systems, Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1703 for 32-bit Systems, Windows 10 Version 1703 for x64-based Systems, and Windows Server 2016., Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for x64-based Systems Service Pack 2, Windows 7 for 32-bit Systems Service Pack 1, Windows 7 for x64-based Systems Service Pack 1, Windows 8.1 for 32-bit systems, Windows 8.1 for x64-based systems, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, Windows 10 for 32-bit Systems, Windows 10 for x64-based Systems, Windows 10 Version 1511 for 32-bit Systems, Windows 10 Version 1511 for x64-based Systems, Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1703 for 32-bit Systems, Windows 10 Version 1703 for x64-based Systems, and Windows Server 2016.+1

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

5
GHSA
GHSA-v5hf-38mr-h2fm: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vu↗2022-05-17
▶
GHSA
GHSA-cvfv-748g-qpfc: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vu↗2022-05-17
▶
CVEList
CVE-2017-0222: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vu↗2017-05-12
▶
CVEList
CVE-2017-0226: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vu↗2017-05-12
▶
VulnCheck
Microsoft Internet Explorer Remote Code Execution Vulnerability↗2017
▶

📋Vendor Advisories

2
CISA
Microsoft Internet Explorer Remote Code Execution Vulnerability↗2022-02-25
▶
Microsoft
Internet Explorer Memory Corruption Vulnerability↗2017-05-09
▶

🕵️Threat Intelligence

6
Qualys
Microsoft Fixes 94 Security Issues in Massive June Update | Qualys↗2017-06-13
▶
Qualys
Microsoft Fixes 94 Security Issues in Massive June Update↗2017-06-13
▶
Talos
Microsoft Patch Tuesday - May 2017↗2017-05-10
▶
Talos
Microsoft Patch Tuesday - May 2017↗2017-05-10
▶
Qualys
Microsoft Fixes Malware Protection Engine and Several 0-Day Vulnerabilities, and Deprecates SHA-1 | Qualys↗2017-05-09
▶
CVE-2017-0222 — Out-of-bounds Write | cvebase