ChakraCore information disclosure vulnerability
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system due to the Chakra scripting engine not properly handling objects in memory, aka "Scripting Engine Information Disclosure Vulnerability".
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-8659US | medium4.3 | — | ||
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system due to the Chakra scripting engine not properly handlin… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/chakra-core/ChakraCorePACKAGE
- https://github.com/chakra-core/ChakraCore/commit/2500e1cdc12cb35af73d5c8c9b85656aba6bab4dWEB
- https://github.com/chakra-core/ChakraCore/pull/3509WEB
- https://nvd.nist.gov/vuln/detail/CVE-2017-8659ADVISORY
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8659WEB
- https://web.archive.org/web/20210612224703/http://www.securityfocus.com/bid/100029WEB
- https://web.archive.org/web/20211127144809/http://www.securitytracker.com/id/1039095WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan