Not rated
CVE-2017-0034 A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory
Description
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Edge | Versions not published |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
- 96786 www.securityfocus.com
- 1038006 www.securitytracker.com
Timeline
- Published
- Last modified
Other CVEs of Edge
The 13 CVEs of Edge →
CVE-2017-0205
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory
Not rated
CVE-2017-0093
A remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting Engine renders when…
Not rated
CVE-2017-0208
An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly…
Not rated
CVE-2017-0200
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory
Not rated