CVE-2017-8548

HIGH 7.5EPSS 67.6%

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system when Microsoft Edge improperly handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8499, CVE-2017-8520, CVE-2017-8521, and CVE-2017-8549.

Affected: Microsoft Corporation · Microsoft Edge
CVSS v3.0 NVD: 7.5 HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v2.0 NVD: 7.6 HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C
EPSS: 67.59% chance of exploitation in the next 30 days, 99th percentile
Published: 2017-06-15
Updated: 2024-08-05

ExploitDB entries (1)

https://www.exploit-db.com/exploits/42473

Security advisories

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8548
http://www.securityfocus.com/bid/98954
http://www.securitytracker.com/id/1038676

References

CVE Record
NVD entry