CVE-2017-8639

CVE-2017-8639: vulnerability in Microsoft Scripting Engine

Published · Updated

Follow this CVE+ Monitor Microsoft Scripting Engine

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 8.6%
Microsoft Edge in Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8640, CVE-2017-8641, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674.
Affected products
Microsoft Corporation · Microsoft Scripting Engine
Related CVEs — Microsoft Scripting Engine

In the same product, most dangerous first.

CVE-2017-8636—CVE-2017-8636EPSS 72.1%CVE-2017-8641—CVE-2017-8641EPSS 71.6%CVE-2017-8634—CVE-2017-8634EPSS 70.3%CVE-2017-8645—CVE-2017-8645EPSS 69.3%CVE-2017-8656—CVE-2017-8656EPSS 69.3%CVE-2017-8640—CVE-2017-8640EPSS 69.3%