VYPR
← All advisories
High severity7.5NVD Advisory· Published Oct 13, 2017· Updated Jun 17, 2026

CVE-2017-11799

CVE-2017-11799

Description

ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Microsoft/Chakracore2 versions
    cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*range: <=1.7.2
    • (no CPE)
  • Microsoft/Edge2 versions
    cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*
    • (no CPE)
  • Microsoft/Windowsllm-fuzzy
    Range: 10 Gold, 1511, 1607, 1703, and Windows Server 2016
  • Microsoft Corporation/ChakraCore, Microsoft Edgev5
    Range: ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.