PT-2017-18449

CVE-2017-8637

·

تاريخ النشر

2017-08-08

·

تاريخ التحديث

2019-10-03

الوصف من

CVSS 2.0
2.6
منخفضة
المقاييسAV:N/AC:H/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Microsoft Edge in Microsoft Windows 10 1703
Description A security feature bypass issue exists due to how Microsoft Edge accesses memory in code compiled by the Edge Just-In-Time (JIT) compiler, allowing Arbitrary Code Guard (ACG) to be bypassed. This issue does not allow arbitrary code execution on its own but could be used in conjunction with another vulnerability, such as a remote code execution vulnerability, to run arbitrary code on a target system. Exploitation requires a user to be logged on and running an affected version of Microsoft Edge, and then browse to a malicious website.
Recommendations For Microsoft Edge in Microsoft Windows 10 1703, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾