CVE-2017-0150 is a remote code execution vulnerability affecting Microsoft Edge, Windows 10, and Windows Server 2016. It stems from how Microsoft scripting engines handle objects in memory, potentially leading to memory corruption. A successful exploit could allow an attacker to execute arbitrary code with the same user rights as the current user, potentially gaining full control if the user has administrative privileges. The vulnerability has a CVSS score of 7.5 (High) due to its network-based attack vector and high impact on confidentiality, integrity, and availability, though it requires user interaction and has high attack complexity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.4 Bluesky, 0.2 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.6 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.