CVE-2017-11874

Опубликовано: 15 нояб. 2017

Источник: nvd

CVSS3: 3.1

CVSS2: 2.6

EPSS Низкий

Описание

Microsoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore allows an attacker to bypass Control Flow Guard (CFG) to run arbitrary code on a target system, due to how Microsoft Edge handles accessing memory in code compiled by the Edge Just-In-Time (JIT) compiler, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-11863 and CVE-2017-11872.

Ссылки

http://www.securityfocus.com/bid/101750
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039801
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11874
Patch
Vendor Advisory
http://www.securityfocus.com/bid/101750
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039801
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11874
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:microsoft:chakracore:-:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server:1709:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.03128

Низкий

3.1 Low

CVSS3

2.6 Low

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2017-11874

CVSS3: 3.1

msrc

больше 7 лет назад

Microsoft Edge Security Feature Bypass Vulnerability

GHSA-mpq3-wcg8-72j4

CVSS3: 3.1

github

около 3 лет назад

EPSS

Процентиль: 86%

0.03128

Низкий

3.1 Low

CVSS3

2.6 Low

CVSS2

Дефекты

NVD-CWE-noinfo