CVE-2017-11798 is a scripting engine memory corruption vulnerability in Microsoft Edge affecting Windows 10 and Windows Server 2016. This high-severity vulnerability (CVSS 7.5) allows an unauthenticated attacker to execute arbitrary code in the context of the current user through a complex attack requiring user interaction. While not currently listed in CISA's KEV catalog, its EPSS score indicates a higher-than-average probability of exploitation. There is no public exploit code available, but the vulnerability has received some community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.4 Bluesky, 0.2 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.6 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.