CVE-2017-0252

CRITICAL

Microsoft Edge - Remote Code Execution via Memory Corruption in JavaScript Engine

Title source: llm
STIX 2.1

Description

A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engine Memory Corruption Vulnerability". This vulnerability is unique from CVE-2017-0223.

References (1)

Core 1
Core References
Patch, Third Party Advisory x_refsource_confirm
https://github.com/Microsoft/ChakraCore/pull/2959

Scores

CVSS v3 9.8
EPSS 0.2432
EPSS Percentile 96.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (3)
microsoft/edge
Microsoft Corporation/Chakra Core
nuget/Microsoft.ChakraCore 0 - 1.4.4NuGet
Published May 15, 2017
Tracked Since Feb 18, 2026