CVE-2017-8594

Internet Explorer on Microsoft Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability".

Affected

Microsoft Corporation · Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2

CVSS v3.0 NVD

7.5 HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.6 HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C

EPSS

50.37% chance of exploitation in the next 30 days, 99th percentile

Published

2017-07-11

Updated

2024-09-17

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/42336

Security advisories

• https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8594
• http://www.securityfocus.com/bid/99401

References

• CVE Record
• NVD entry