Microsoft Edge: Out-of-bounds read in CInputDateTimeScrollerElement::_SelectValueInternal(CVE-2017-8644)

The vulnerability has been confirmed on Windows 10 Enterprise 64-bit OS version 1607, OS build 14393.1198 and Microsoft Edge 38.14393.1066.0, Microsoft EdgeHTML 14.14393. PoC: ========================================== input:focus transform: scale10; =========================================...

Microsoft Edge CInputDateTimeScrollerElement::_SelectValueInternal Out-Of-Bounds Read

Microsoft Edge: Out-of-bounds read in CInputDateTimeScrollerElement::SelectValueInternal CVE-2017-8644 The vulnerability has been confirmed on Windows 10 Enterprise 64-bit OS version 1607, OS build 14393.1198 and Microsoft Edge 38.14393.1066.0, Microsoft EdgeHTML 14.14393. PoC:...

CVE-2017-8644

creationtimestamp| type| source ---|---|--- 2017-08-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42459...

Information disclosure

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to disclose information due to the way that Microsoft Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8644 and...

CVE-2017-8644

CVE-2017-8644 concerns an information disclosure vulnerability in Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016, arising from how Edge handles objects in memory. The connected sources confirm the affected component is Edge and describe memory-object handling as the...