CVE-2017-8618

HIGH

Microsoft Internet Explorer - Memory Corruption

Title source: rule

Description

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 Internet Explorer in the way affected Microsoft scripting engines render when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-8596, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, CVE-2017-8619, CVE-2017-9598 and CVE-2017-8609.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Google Security Research · htmldoswindows

https://www.exploit-db.com/exploits/42337

View Code ZIP pw:eip

References (4)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/99399

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1038848

[Patch, Vendor Advisory] https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8618

[Exploit, Third Party Advisory, VDB Entry] https://www.exploit-db.com/exploits/42337/

Scores

CVSS v3 7.5

EPSS 0.6073

EPSS Percentile 98.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-119

Status published

Products (4)

microsoft/internet_explorer 11

microsoft/internet_explorer 10

microsoft/internet_explorer 9

Microsoft Corporation/Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 Internet Explorer

Published Jul 11, 2017

Tracked Since Feb 18, 2026