CVE-2017-0266

Опубликовано: 12 мая 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 7.6

EPSS Средний

Описание

A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka "Microsoft Edge Remote Code Execution Vulnerability."

Ссылки

http://www.securityfocus.com/bid/98276
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0266
Patch
Vendor Advisory
http://www.securityfocus.com/bid/98276
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0266
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.53213

Средний

7.5 High

CVSS3

7.6 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2017-0266

CVSS3: 4.2

msrc

около 8 лет назад

Scripting Engine Memory Corruption Vulnerability

GHSA-wwr8-285h-v9pc