CVE-2017-11910
HighSummary
ChakraCore and Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016 have a vulnerability that allows an attacker to execute arbitrary code in the context of the current user due to improper handling of objects in memory by the scripting engine.
Risk Assessment
This vulnerability could allow an attacker to gain control over the system, posing a serious threat to the security of the organization's data and systems.
Recommendation
It is recommended to update systems to the latest versions that include security patches addressing this vulnerability.
Other vulnerabilities in ChakraCore, Windows 10, Windows Server 2016
See all- CVE-2017-11911High
ChakraCore and Windows 10 versions 1511, 1607, 1703, 1709, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-11909High
ChakraCore and Windows 10 (versions 1511, 1607, 1703, 1709) and Windows Server 2016 have a vulnerability that allows an attacker to execute arbitrary code in the context of the current user. The issue arises from how the scripting engine handles objects in memory.
Original NVD description (English source)
ChakraCore and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930.