CVE-2017-8755

7.5 highEPSS 71%

High (7.5) in microsoft edge. EPSS 71% chance of exploitation in the next 30 days.

Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8649, CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8756, and CVE-2017-11764.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 71% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2017-09-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:edge

References

http://www.securityfocus.com/bid/100778
http://www.securitytracker.com/id/1039342
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8755
https://www.exploit-db.com/exploits/42766/
http://www.securityfocus.com/bid/100778

Check your stack JSON