CVE Database
/

CVE-2017-11870

Back to search

CVE-2017-11870

Published: Nov 15, 2017

Modified: Sep 17, 2024

PUBLISHED

Description

ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11871, and CVE-2017-11873.

VendorProductVersions

Microsoft Corporation

ChakraCore, Microsoft Edge

affected
Windows 10 1703, 1709, and Windows Server, version 1709.

References

101731
vdb-entry
x_refsource_BID
43182
exploit
x_refsource_EXPLOIT-DB
1039780
vdb-entry
x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now