High severity7.5NVD Advisory· Published Nov 15, 2017· Updated Jun 17, 2026

CVE-2017-11845

Description

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft Edge handles objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability".

Affected products

Microsoft/Edge2 versions
cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*
- (no CPE)
Microsoft/Windowsllm-fuzzy
Range: 10 1703
Microsoft Corporation/Microsoft Edgev5
Range: Microsoft Windows 10 1703.

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11845nvdPatchVendor Advisory
www.securityfocus.com/bid/101708nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1039780nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.006
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000