CVE-2017-8596 is a scripting engine memory corruption vulnerability in Microsoft Edge affecting Windows 10 versions 1607 and 1703, and Windows Server 2016. This high-severity vulnerability (CVSS 7.5) allows an unauthenticated attacker to execute arbitrary code in the context of the current user through a complex attack involving user interaction. While no public exploits or Metasploit modules are available, and it is not listed in CISA's KEV catalog, it has received some community and media attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.2 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.6 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.