← Back

CVE-2017-11874

nvd nist
Published: Nov 15, 2017Modified: May 13, 2026

JSON object

Loading...
3.1
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
Exploitability: 1.6 / Impact: 1.4
Source: NVD

Description

Microsoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore allows an attacker to bypass Control Flow Guard (CFG) to run arbitrary code on a target system, due to how Microsoft Edge handles accessing memory in code compiled by the Edge Just-In-Time (JIT) compiler, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-11863 and CVE-2017-11872.

Affected (2)

Microsoft
2 products
Chakracore
Edge
Configuration A
2 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Chakracore
All versions
Edge
All versions
Running on/withPlatform Versions
Microsoft
Windows 10
Version 1703
Microsoft
Windows 10
Version 1709
Microsoft
Windows Server
Version 1709

References (6)

Source: secure@microsoft.com
Third Party AdvisoryVDB Entry
Source: secure@microsoft.com
Third Party AdvisoryVDB Entry
Source: secure@microsoft.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.