CVE-2017-0196
CVE-2017-0196
Vexday Risk Score
8Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 18.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
14 Jul 2017Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An information disclosure vulnerability in Microsoft scripting engine allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."
Affected products
Microsoft Corporation · Microsoft ChakraCoreWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →