CVE-2017-0240

A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0221 and CVE-2017-0227.

Score

CVSS 3.0 7.5 High

Status

Modified - secure@microsoft.com

Published

2017-05-12

Last modified

2024-08-05

Weaknesses

CWE-119

Affected products

• Edge (Microsoft)
• Microsoft Edge (Microsoft Corporation)

References

• http://www.securityfocus.com/bid/98203
• http://www.securitytracker.com/id/1038424
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0240