CVE-2017-8731

HIGH

Microsoft Edge - Remote Code Execution via Memory Corruption

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2017-8731. PoCs published by Google Security Research.

AI-analyzed exploit summary This exploit demonstrates a memory corruption vulnerability in Microsoft Edge by manipulating DOM elements during page load, leading to a potential RCE condition. The PoC includes a custom HTTP server to simulate slow document loading and trigger the issue.

Description

Microsoft Edge in Microsoft Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8734, CVE-2017-8751, and CVE-2017-11766.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Google Security Research · textdoswindows
https://www.exploit-db.com/exploits/42758

This exploit demonstrates a memory corruption vulnerability in Microsoft Edge by manipulating DOM elements during page load, leading to a potential RCE condition. The PoC includes a custom HTTP server to simulate slow document loading and trigger the issue.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Racy
Target: Microsoft Edge 38.14393.1066.0 (Microsoft EdgeHTML 14.14393)
No auth needed
Prerequisites: Custom HTTP server to control document loading timing
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/42758/
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1039326
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/100735

Scores

CVSS v3 7.5
EPSS 0.5155
EPSS Percentile 98.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (1)
microsoft/edge
Published Sep 13, 2017
Tracked Since Feb 18, 2026