CVE-2017-0240 is a remote code execution vulnerability affecting Microsoft Edge, stemming from memory corruption within its scripting engines. With a CVSS score of 7.5 (High), successful exploitation could lead to complete compromise of confidentiality, integrity, and availability, though it requires user interaction and has high attack complexity. While there is no public exploit code available (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, including a mention in SecurityWeek regarding Microsoft's patches.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.4 Bluesky, 0.2 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.6 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.