CVE-2017-8661Improper Restriction of Operations within the Bounds of a Memory Buffer in Corporation Microsoft Edge

Severity
7.5HIGHNVD
EPSS
17.3%
top 4.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedAug 8
Latest updateMay 17

Description

Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way affected Microsoft scripting engines render when handling objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability".

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.6 | Impact: 5.9

Patches

🔴Vulnerability Details

1
GHSA
GHSA-2r5f-4v3g-9cqw: Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current2022-05-17

📋Vendor Advisories

1
Microsoft
Scripting Engine Memory Corruption Vulnerability2017-08-08

🕵️Threat Intelligence

2
Talos
Microsoft Patch Tuesday - August 20172017-08-08
Talos
Microsoft Patch Tuesday - August 20172017-08-08
CVE-2017-8661 — HIGH severity | cvebase