CVE-2017-0230

HIGH

Microsoft Edge - Remote Code Execution via JavaScript Engine Memory Corruption

Title source: llm
STIX 2.1

Description

A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0224, CVE-2017-0228, CVE-2017-0229, CVE-2017-0234, CVE-2017-0235, CVE-2017-0236, and CVE-2017-0238.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/98222

Scores

CVSS v3 7.5
EPSS 0.2401
EPSS Percentile 96.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (2)
microsoft/edge
Microsoft Corporation/Microsoft Edge Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 1
Published May 12, 2017
Tracked Since Feb 18, 2026