CVE-2017-8605observed exploitation

CVE-2017-8605: vulnerability in Microsoft Corporation Windows 10 Gold, 1511…

Published · Updated

Follow this CVE+ Monitor Windows 10 Gold, 1511, 1607, and 1703, and Windows Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

25Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Attendepss 9.0%
from disclosure to weapon
Published on NVDJul 11
VulnCheck+1498d
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8596, CVE-2017-8601, CVE-2017-8618, CVE-2017-8619, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8598, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, and CVE-2017-8609.
Affected products
Microsoft Corporation · Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016
Related CVEs — Microsoft Corporation Windows 10 Gold, 1511…

In the same product, most dangerous first.

CVE-2017-8601—CVE-2017-8601EPSS 66.9%CVE-2017-8619—CVE-2017-8619EPSS 15.9%CVE-2017-8611—CVE-2017-8611EPSS 11.5%CVE-2017-8609—CVE-2017-8609EPSS 8.9%CVE-2017-8603—CVE-2017-8603EPSS 8.9%CVE-2017-8595—CVE-2017-8595EPSS 8.4%