Vulnerabilitycritical
Google publishes remote code vulnerability in Microsoft browsers
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-0037 | Type Confusion RCE in Microsoft Internet Explorer and Edge | 8.1 | 80% | KEVPoC ×5 | KEV |
| CVE-2017-0038 | gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server… | 5.5 | 82% |
From the original article
3 min read at cyberscoop.comThe flaw could affect all users running vulnerable software — which includes anyone using the bundled browser in Windows 7, Windows 8. 1, and Windows 10. Google’s Project Zero published an unpatched and very severe vulnerability in the Microsoft Edge and Internet Explorer version 11 browsers Monday, after a 90-day deadline expired without a fix from Microsoft’s engineers.
By @WatermanReports · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.