CVE Catalog

CVE-2017-8607

High
Published: Translated: NVD NIST

Summary

A vulnerability in Microsoft browsers on Windows 7, Windows Server 2008 and R2, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user. The issue arises from flaws in JavaScript engines when handling objects in memory.

Risk Assessment

Exploitation of this vulnerability could lead to an attacker gaining control over the system, posing a serious threat to the security of organizational data and infrastructure.

Recommendation

It is recommended to update operating systems to the latest versions and apply security patches provided by Microsoft.

Other vulnerabilities in Przeglądarki Microsoft w systemach Windows

Original NVD description (English source)

Microsoft browsers in Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engines fail to render when handling objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8598, CVE-2017-8596, CVE-2017-8618, CVE-2017-8619, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8595, CVE-2017-8606, CVE-2017-8608, and CVE-2017-8609

Vulnerability data from NVD (NIST) · CISA KEV · EPSS