Memory corruption in Microsoft Edge - CVE-2017-11895

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to improper handling of objects in memory in Microsoft browsers. A remote attacker can trick the victim into visiting a specially crafted website, trigger memory corruption and execute arbitrary code with privileges of the current user.

Successful exploitation of the vulnerability may result in system compromise.

Affected software

How to mitigate CVE-2017-11895

External References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11895

Related Security Bulletins

• Multiple RCE vulnerabilities in Microsoft Edge
• Multiple vulnerabilities in Microsoft Internet Explorer
• Multiple vulnerabilities in Microsoft ChakraCore