CVE-2017-8652 EXPLOIT
6.5
MEDIUM · CVSS 3.0 · EPSS 22.9% (pctl 98)
Patch early
A public exploit exists.
Description
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to disclose information due to the way that Microsoft Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8644 and CVE-2017-8662.
Scoring
| CVSS | 6.5 (MEDIUM, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
| EPSS | 22.94% — more likely to be exploited than 98% of all CVEs |
| Weakness | CWE-200 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2017-08-08 |
| Last modified | 2026-06-17 |
Affected (3)
| Vendor | Product |
|---|---|
| microsoft | edge |
| microsoft | windows 10 |
| microsoft | windows server 2016 |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Microsoft Edge 38.14393.1066.0 - 'textarea.defaultValue' Memory Disclosure | 2017-08-10 |
References
- http://www.securityfocus.com/bid/100047
- http://www.securitytracker.com/id/1039101
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8652
- https://www.exploit-db.com/exploits/42445/
- http://www.securityfocus.com/bid/100047
- http://www.securitytracker.com/id/1039101
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8652
- https://www.exploit-db.com/exploits/42445/
→ the Explorer · watch your stack · NVD