CVE Catalog

CVE-2017-8605

High
Published: Translated: NVD NIST

Summary

A vulnerability in the JavaScript engine of Microsoft Edge allows an attacker to execute arbitrary code in the context of the current user when the engine improperly handles objects in memory.

Risk Assessment

Exploitation of this vulnerability could lead to an attacker gaining control over the system, posing a serious threat to user data security.

Recommendation

It is recommended to update the operating system to the latest version to patch this vulnerability and to monitor system activity for potential attacks.

Other vulnerabilities in Microsoft Edge w systemach Windows 10 Gold, 1511, 1607, 1703 oraz Windows Server 2016

Original NVD description (English source)

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8596, CVE-2017-8601, CVE-2017-8618, CVE-2017-8619, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8598, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, and CVE-2017-8609.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS