CVE-2017-0202

high-risk

Published 2017-04-12

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user, a.k.a. "Internet Explorer Memory Corruption Vulnerability."

Do I need to act?

61.9% chance of exploitation in next 30 days

EPSS score — higher than 38% of all CVEs

Not on CISA KEV list

No confirmed active exploitation reported to CISA

1 public exploit available

41941

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.5/10 High

NETWORK / HIGH complexity

Affected Products (1)

Internet Explorer

Affected Vendors

Microsoft

References (8)

Third Party Advisory http://www.securityfocus.com/bid/97441

http://www.securitytracker.com/id/1038238

Patch https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0202

https://www.exploit-db.com/exploits/41941/

Third Party Advisory http://www.securityfocus.com/bid/97441

http://www.securitytracker.com/id/1038238

Patch https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0202

https://www.exploit-db.com/exploits/41941/

/ 100

high-risk

Severity 22/34 · High

Exploitability 26/34 · High

Exposure 5/34 · Minimal