ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2017-0049

—
CVSS 3.0
4.3 medium
EPSS
39%p98
Published
()
Modified
Description

The VBScript engine in Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Scripting Engine Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0018, and CVE-2017-0037.

Vendors
microsoft
Products
internet explorer
Weakness
CWE-200
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (38.9%)

In the news

No ingested article mentions this CVE yet.