Lucene search

CVE-2017-11866

🗓️ 15 Nov 2017 03:00:00Reported by microsoftType

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server version 1709 scripting engine memory corruption vulnerabilit

Reporter	Title	Published	Views	Family All 169
OSV	Chakra Core vulnerable to privilege escalation due to reading an invalid pointer	17 May 202200:19	–	osv
OSV	Chakra Core vulnerable to privilege escalation when writing to JavaScript null scope objects	17 May 202200:19	–	osv
OSV	Chakra Core vulnerable to privilege escalation due to type confusion	17 May 202200:19	–	osv
Veracode	Remote Code Execution (RCE)	3 Dec 201805:21	–	veracode
Prion	Memory corruption	15 Nov 201703:29	–	prion
Prion	Memory corruption	15 Nov 201703:29	–	prion
Prion	Memory corruption	15 Nov 201703:29	–	prion
Prion	Memory corruption	15 Nov 201703:29	–	prion
Prion	Memory corruption	15 Nov 201703:29	–	prion
Prion	Memory corruption	15 Nov 201703:29	–	prion

[
  {
    "product": "ChakraCore, Microsoft Edge",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709."
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11866
securitytracker	www.securitytracker.com/id/1039780
securityfocus	www.securityfocus.com/bid/101732

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Nov 2017 03:00Current

7.5High risk

Vulners AI Score7.5

EPSS0.898