CVE-2017-11840

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the…

published November 15, 2017

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.1th percentile for exploit probability.

CVSS
—
EPSS
60%
Percentile
99.1
In the wild
Unconfirmed
What it is

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.59642 · 99.1th percentile
Published
2017-11-15T03:00Z
EPSS history
Timeline
  • 22 SEP 03:13Z
    EPSS moved 60% → 46%
    epss
  • 06 SEP 03:10Z
    EPSS moved 60% → 46%
    epss
  • 30 AUG 15:38Z
    EPSS moved 46% → 60%
    epss
  • 29 AUG 04:18Z
    EPSS moved 60% → 46%
    epss
  • 15 NOV 03:00Z
    ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the…
    cvelistv5