CVE-2017-0208

EPSS 15.3%

Vexday Risk Score

8Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 15.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

12 abr 2017Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly handle objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, a.k.a. "Scripting Engine Information Disclosure Vulnerability."

Productos afectados

Microsoft Corporation · Edge

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0208 http://www.securityfocus.com/bid/97460 http://www.securitytracker.com/id/1038234