CVE-2017-0093
high · 7.5A remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting Engine renders when handling objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0201.
7.5
CVSS
13.7%
EPSS (exploit prob.)
96th
EPSS percentile
2017-04-12
Published
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | edge | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://www.securityfocus.com/bid/97419
- http://www.securitytracker.com/id/1038234
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0093
- http://www.securityfocus.com/bid/97419
- http://www.securitytracker.com/id/1038234
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0093
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2017-0093