Information Disclosure Vulnerability in Microsoft Edge on Windows 10
CVE-2017-8659

4.3MEDIUM

Key Information:

Vendor

Microsoft
Status
Microsoft Scripting Engine
Vendor
CVE Published:
8 August 2017

What is CVE-2017-8659?

An information disclosure vulnerability exists in the Chakra scripting engine of Microsoft Edge, which affects Windows 10 version 1703. This flaw enables attackers to exploit the improper handling of objects in memory, potentially leading to unauthorized information retrieval. This behavior provides a pathway for further system compromises if targeted successfully, underscoring the importance of maintaining updated security measures.

Affected Version(s)

Microsoft Scripting Engine Microsoft Windows 10 1703.

References

https://portal.msrc.microsoft.com/en-US/security-guidance...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/100029
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1039095
vdb-entryx_refsource_SECTRACK

EPSS Score

12% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2017-8659 : Information Disclosure Vulnerability in Microsoft Edge on Windows 10