CVE-2017-8644 EXPLOIT
4.3
MEDIUM · CVSS 3.0 · EPSS 15.1% (pctl 97)
Patch early
A public exploit exists.
Description
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to disclose information due to the way that Microsoft Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8652 and CVE-2017-8662.
Scoring
| CVSS | 4.3 (MEDIUM, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N |
| EPSS | 15.12% — more likely to be exploited than 97% of all CVEs |
| Weakness | CWE-200 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2017-08-08 |
| Last modified | 2026-06-17 |
Affected (3)
| Vendor | Product |
|---|---|
| microsoft | edge |
| microsoft | windows 10 |
| microsoft | windows server 2016 |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Microsoft Edge 38.14393.1066.0 - 'CInputDateTimeScrollerElement::_SelectValueInternal' Out-of-Bounds Read | 2017-08-16 |
References
- http://www.securityfocus.com/bid/100044
- http://www.securitytracker.com/id/1039101
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8644
- https://www.exploit-db.com/exploits/42459/
- http://www.securityfocus.com/bid/100044
- http://www.securitytracker.com/id/1039101
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8644
- https://www.exploit-db.com/exploits/42459/
→ the Explorer · watch your stack · NVD