CVE-2017-8598 is a scripting engine memory corruption vulnerability in Microsoft Edge affecting Windows 10 and Windows Server 2016. This high-severity vulnerability (CVSS 7.5) allows an unauthenticated attacker to execute arbitrary code in the context of the current user through a complex attack requiring user interaction, leading to high impact on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code, the vulnerability has garnered some community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.4 Bluesky, 0.2 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.6 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.