CVE-2017-11804: Buffer Overflow
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-11804?
CVE-2017-11804 is classified as a critical vulnerability allowing arbitrary code execution.
How do I fix CVE-2017-11804?
To fix CVE-2017-11804, install the latest security updates provided by Microsoft for affected versions.
Which software is affected by CVE-2017-11804?
CVE-2017-11804 affects Microsoft ChakraCore and Microsoft Edge in specific versions of Windows 10 and Windows Server 2016.
What are the potential impacts of CVE-2017-11804?
Exploitation of CVE-2017-11804 can lead to arbitrary code execution in the context of the current user.
Is CVE-2017-11804 under active exploitation?
At the time of reporting, CVE-2017-11804 was not known to be actively exploited in the wild.