CVE-2017-11894

🗓️ 12 Dec 2017 21:00:00Reported by microsoftType

CVE-2017-11894 ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability"

Reporter	Title	Published	Views	Family All 91
ATTACKERKB	CVE-2017-11886	12 Dec 201721:29	–	attackerkb
ATTACKERKB	CVE-2017-11905	12 Dec 201721:29	–	attackerkb
ATTACKERKB	CVE-2017-11914	12 Dec 201721:29	–	attackerkb
ATTACKERKB	CVE-2017-11909	12 Dec 201721:29	–	attackerkb
ATTACKERKB	CVE-2017-11908	12 Dec 201721:29	–	attackerkb
ATTACKERKB	CVE-2017-11894	12 Dec 201721:29	–	attackerkb
ATTACKERKB	CVE-2017-11890	12 Dec 201721:29	–	attackerkb
ATTACKERKB	CVE-2017-11930	12 Dec 201721:29	–	attackerkb
ATTACKERKB	CVE-2017-11895	12 Dec 201721:29	–	attackerkb
ATTACKERKB	CVE-2017-11901	12 Dec 201721:29	–	attackerkb

NVD

Node

microsoft chakracoreRange<1.7.5

microsoft internet_explorerMatch11

AND

microsoft windows_10Match-

microsoft windows_10Match1511

microsoft windows_10Match1607

microsoft windows_10Match1703

microsoft windows_10Match1709

microsoft windows_7Match-sp1

microsoft windows_8.1Match-

microsoft windows_rt_8.1Match-

microsoft windows_server_2008Matchr2sp1

microsoft windows_server_2012Matchr2

microsoft windows_server_2016Match-

Node

microsoft chakracoreRange<1.7.5

microsoft internet_explorerMatch10

AND

microsoft windows_server_2012Match-

Node

microsoft chakracoreRange<1.7.5

microsoft internet_explorerMatch9

AND

microsoft windows_server_2008Match-sp2

Node

microsoft chakracoreRange<1.7.5

microsoft edgeMatch-

AND

microsoft windows_10Match-

microsoft windows_10Match1511

microsoft windows_10Match1607

microsoft windows_10Match1703

microsoft windows_10Match1709

microsoft windows_server_2016Match-

[
  {
    "product": "ChakraCore, Microsoft Edge, Internet Explorer",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016."
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1039990
securitytracker	www.securitytracker.com/id/1039991
securityfocus	www.securityfocus.com/bid/102053
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11894

13 May 2026 00:24Current

7.6High risk

Vulners AI Score7.6

CVSS 37.5

CVSS 27.6

EPSS0.3205

CWE-119