CVE-2017-11871

State: Published
Severity: Not scored
Published: Nov 15, 2017
Updated: Sep 16, 2024
Reserved: Jul 31, 2017

Description

ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, and CVE-2017-11873.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
ChakraCore, Microsoft EdgeMicrosoft Corporation	Windows 10 1703, 1709, and Windows Server, version 1709.Affected

References

1039780vdb-entry
101730vdb-entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11871

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.