Skip to content
NewA calmer, faster ZeroHour

CVE-2017-11801

CVSS 3.0
7.5 high
EPSS
6%p93
Published
·
Modified
Analyze CVE-2017-11801 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821.

Vendors
microsoft
Products
chakracore
Weakness
CWE-200
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

In the news

1 story