CVE-2017-11874

3.1 lowEPSS 4.0%

Low (3.1) in microsoft. EPSS 4.0% chance of exploitation in the next 30 days.

Microsoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore allows an attacker to bypass Control Flow Guard (CFG) to run arbitrary code on a target system, due to how Microsoft Edge handles accessing memory in code compiled by the Edge Just-In-Time (JIT) compiler, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-11863 and CVE-2017-11872.

Severity

CVSS 3.0

3.1 low

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS: 4.0% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
Published: 2017-11-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:chakracore
microsoft:edge

References

http://www.securityfocus.com/bid/101750
http://www.securitytracker.com/id/1039801
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11874
http://www.securityfocus.com/bid/101750
http://www.securitytracker.com/id/1039801

Check your stack JSON