CVE-2017-8669: Buffer Overflow
First published: Tue Aug 08 2017(Updated: )
Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to Microsoft browsers improperly handling objects in memory while rendering content, aka "Microsoft Browser Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8653.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Edge | ||
| Internet Explorer | =11 | |
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | =1511 | |
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =1703 | |
| Microsoft Windows 8.1 | ||
| Microsoft Windows RT | ||
| Microsoft Windows Server 2012 x64 | =r2 | |
| Microsoft Windows Server 2016 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-8669?
CVE-2017-8669 has a critical severity level as it allows attackers to execute arbitrary code in the context of the current user.
How do I fix CVE-2017-8669?
To fix CVE-2017-8669, install the latest security update provided by Microsoft for the affected products.
Which versions of Microsoft browsers are affected by CVE-2017-8669?
CVE-2017-8669 affects Microsoft Edge and Internet Explorer 11 on various Windows versions.
What types of attacks can exploit CVE-2017-8669?
CVE-2017-8669 can be exploited through malicious web content, leading to code execution.
What operating systems are vulnerable to CVE-2017-8669?
CVE-2017-8669 impacts Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows 10 Gold, and various Windows Server versions.
- agent/references
- agent/type
- agent/severity
- agent/author
- agent/weakness
- agent/remedy
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/microsoft edge
- canonical/internet explorer
- version/internet explorer/11
- canonical/microsoft windows 10
- version/microsoft windows 10/1511
- version/microsoft windows 10/1607
- version/microsoft windows 10/1703
- canonical/microsoft windows 8.1
- canonical/microsoft windows rt
- canonical/microsoft windows server 2012 x64
- version/microsoft windows server 2012 x64/r2
- canonical/microsoft windows server 2016