Scripting Engine Memory Corruption Vulnerability in Microsoft Windows Browsers
CVE-2017-8606
7.5HIGH
Key Information:
- Vendor
- Microsoft
- Vendor
- CVE Published:
- 11 July 2017
Summary
A memory corruption vulnerability exists in the scripting engine of Microsoft browsers that can allow an attacker to execute arbitrary code within the user's context. This occurs when the engines improperly handle objects in memory. Successful exploitation may compromise the security of the affected system, granting unauthorized access to sensitive data or the ability to execute malicious actions.
Affected Version(s)
Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 Microsoft broswers
References
EPSS Score
47% chance of being exploited in the next 30 days.
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved