CVE-2017-0226

HIGH

Internet Explorer - Remote Code Execution via Memory Corruption

Title source: llm
STIX 2.1

Description

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0222.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/98139

Scores

CVSS v3 7.5
EPSS 0.2401
EPSS Percentile 96.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (3)
microsoft/internet_explorer 10
microsoft/internet_explorer 11
Microsoft Corporation/Internet Explorer Windows 8.1 for 32-bit systems, Windows 8.1 for x64-based systems, Windows RT 8.1, Windows Server 20
Published May 12, 2017
Tracked Since Feb 18, 2026