CVE-2017-0208

Severity: medium (CVSS 4.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 15.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-04-12 · updated 2026-06-17
Weakness: CWE-200

Description

An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly handle objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, a.k.a. "Scripting Engine Information Disclosure Vulnerability."

Affected products

Microsoft Edge: all versions
Microsoft Edge: Edge

References

http://www.securityfocus.com/bid/97460
http://www.securitytracker.com/id/1038234
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0208
http://www.securityfocus.com/bid/97460
http://www.securitytracker.com/id/1038234
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0208

Get alerted when CVE-2017-0208 or the next vulnerability affects your stack