CVE-2017-11811
HighSummary
ChakraCore and Microsoft Edge in Windows 10 and Windows Server 2016 have a vulnerability that allows an attacker to execute arbitrary code in the context of the current user. The issue arises from how the scripting engine handles objects in memory.
Risk Assessment
This vulnerability could lead to an attacker gaining control over the system, posing a serious threat to the security of the organization's data and systems.
Recommendation
It is recommended to update the system to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.
Other vulnerabilities in ChakraCore, Microsoft Edge, Windows 10, Windows Server 2016
See all- CVE-2017-11866High
ChakraCore and Microsoft Edge in Windows 10 and Windows Server have a vulnerability that allows an attacker to gain the same user rights as the current user due to improper handling of objects in memory by the scripting engine.
- CVE-2017-11841High
ChakraCore and Microsoft Edge in Windows 10 and Windows Server have a vulnerability that allows an attacker to gain the same user rights as the current user due to improper handling of objects in memory by the scripting engine.
Original NVD description (English source)
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11812, and CVE-2017-11821.