First published: Wed Sep 13 2017(Updated: )
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8649, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756, and CVE-2017-11764.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Edge Beta | ||
Windows 10 | ||
Windows 10 | =1511 | |
Windows 10 | =1607 | |
Windows 10 | =1703 | |
Microsoft Windows Server 2016 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-8660 has a critical severity rating due to its potential to allow arbitrary code execution.
To fix CVE-2017-8660, users should apply the latest security updates provided by Microsoft for affected Edge and Windows versions.
CVE-2017-8660 affects Microsoft Edge across several Windows 10 versions including 1511, 1607, and 1703.
Yes, an attacker can exploit CVE-2017-8660 remotely through maliciously crafted web content.
If you suspect exploitation of CVE-2017-8660, immediately update your system and perform a security scan to ensure no unauthorized activities have occurred.