CVE-2017-8496

🗓️ 15 Jun 2017 01:00:00Reported by microsoftType

cve🔗 web.nvd.nist.gov👁 78 Views🌐 WEB

Microsoft Edge Memory Corruption Vulnerability in Windows 10 1607 and Windows Server 2016

Reporter	Title	Published	Views	Family All 21
0day.today	Microsoft Edge CssParser::RecordProperty Type Confusion Exploit	26 Jun 201700:00	–	zdt
0day.today	Microsoft Edge - CssParser::RecordProperty Type Confusion Exploit	28 Jun 201700:00	–	zdt
Circl	CVE-2017-8496	23 Jun 201700:00	–	circl
CNVD	Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-12096)	15 Jun 201700:00	–	cnvd
Check Point Advisories	Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8496)	13 Jun 201700:00	–	checkpoint_advisories
Cvelist	CVE-2017-8496	15 Jun 201701:00	–	cvelist
Microsoft KB	June 13, 2017—KB4022715 (OS Build 14393.1358)	4 Aug 201707:00	–	mskb
Kaspersky	KLA11045 Multiple vulnerabilities in Microsoft Edge and Microsoft Internet Explorer	13 Jun 201700:00	–	kaspersky
Microsoft CVE	Microsoft Edge Memory Corruption Vulnerability	13 Jun 201707:00	–	mscve
NVD	CVE-2017-8496	15 Jun 201701:29	–	nvd

NVD

Node

microsoft edgeMatch-

AND

microsoft windows_10Match1607

microsoft windows_server_2016Match-

[
  {
    "product": "Microsoft Edge",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Microsoft Windows 10 1607 and Windows Server 2016."
      }
    ]
  }
]

Source	Link
exploit-db	www.exploit-db.com/exploits/42246/
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8496
securityfocus	www.securityfocus.com/bid/98880

Parameter	Position	Path	Description	CWE
style.cssText	nested	about:internet	Memory corruption via CSS parsing in Edge when interpreting CSS with a crafted clip-path using a CSS URL, leading to arbitrary code execution.	CWE-119

13 May 2026 00:24Current

6.5Medium risk

Vulners AI Score6.5

CVSS 37.5

CVSS 27.6

EPSS0.55885

CWE-119