PT-2017-18449

CVE-2017-8637

·

Publicado

2017-08-08

·

Atualizado

2019-10-03

Descrição por

CVSS 2.0
2.6
Baixa
MétricasAV:N/AC:H/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Microsoft Edge in Microsoft Windows 10 1703
Description A security feature bypass issue exists due to how Microsoft Edge accesses memory in code compiled by the Edge Just-In-Time (JIT) compiler, allowing Arbitrary Code Guard (ACG) to be bypassed. This issue does not allow arbitrary code execution on its own but could be used in conjunction with another vulnerability, such as a remote code execution vulnerability, to run arbitrary code on a target system. Exploitation requires a user to be logged on and running an affected version of Microsoft Edge, and then browse to a malicious website.
Recommendations For Microsoft Edge in Microsoft Windows 10 1703, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾