cbcvebase.
CVE-2017-11918
published 2017-12-12

CVE-2017-11918: ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the…

PriorityP268high7.5CVSS 3.0
AVNACHPRNUIRSUCHIHAH
EXPLOIT
EPSS
62.65%
99.1th percentile
ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, and CVE-2017-11930.

Affected

16 ranges
VendorProductVersion rangeFixed in
microsoftchakracore< 1.7.51.7.5
microsoftinternet_explorer
microsoftinternet_explorer
microsoftinternet_explorer
msrcchakracore
msrcmicrosoft_edge_on_windows_10_for_32-bit_systems
msrcmicrosoft_edge_on_windows_10_for_x64-based_systems
msrcmicrosoft_edge_on_windows_10_version_1511_for_32-bit_systems
msrcmicrosoft_edge_on_windows_10_version_1511_for_x64-based_systems
msrcmicrosoft_edge_on_windows_10_version_1607_for_32-bit_systems
msrcmicrosoft_edge_on_windows_10_version_1607_for_x64-based_systems
msrcmicrosoft_edge_on_windows_10_version_1703_for_32-bit_systems
msrcmicrosoft_edge_on_windows_10_version_1703_for_x64-based_systems
msrcmicrosoft_edge_on_windows_10_version_1709_for_32-bit_systems
msrcmicrosoft_edge_on_windows_10_version_1709_for_x64-based_systems
msrcmicrosoft_edge_on_windows_server_2016

Detection & IOCsextracted from sources · hover to see the quote

urlhttps://github.com/Microsoft/ChakraCore/releases/tag/v1.7.5
commandfunction opt() { let tmp = []; tmp[0] = tmp; return tmp[0]; } function main() { for (let i = 0; i < 0x1000; i++) { opt(); } print(opt()); } main();
  • Trigger pattern: a self-referential array (tmp[0] = tmp) returned from a JIT-compiled function looped ≥0x1000 times causes ChakraCore escape analysis to misclassify the array as stack-allocated, leading to dereference of uninitialized stack values — monitor for Edge/ChakraCore JIT crashes or abnormal stack-pointer dereferences in chakra.dll.
  • Exploitation vector is web-based: attacker hosts or compromises a website serving specially crafted content targeting Microsoft Edge (HTML-based); monitor for Edge renderer process spawning unexpected child processes or privilege escalation after visiting external URLs.
  • Microsoft rates this as 'Exploitation More Likely' for the latest software release; prioritize detection and patching on unpatched Windows 10 / Server 2016 systems running Microsoft Edge.
  • ·Exploit is publicly available on Exploit-DB (EDB-43469) as a PoC; the MSRC advisory notes 'Publicly Disclosed: No' — treat the EDB entry as the public disclosure reference for detection prioritization.
  • ·The vulnerability affects ChakraCore and Microsoft Edge across Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016; the fix is ChakraCore v1.7.5 and KB patches 4053580, 4054517, 4053581, 4053578, 4053579.

CVSS provenance

nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.07.6HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C
ghsa7.5HIGH
osv7.5HIGH
vendor_msrc4.2MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.