High severity7.5NVD Advisory· Published Dec 12, 2017· Updated Jun 17, 2026

CVE-2017-11888

Description

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft Edge handles objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability".

Affected products

Microsoft/Edge2 versions
cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*
- (no CPE)
Microsoft/Windowsllm-fuzzy
Microsoft Corporation/Microsoft Edgev5
Range: Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016.

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11888nvdPatchVendor Advisory
www.securityfocus.com/bid/102065nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1039990nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.007
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000