{"id":"CVE-2017-0228","aliases":["EUVD-2017-0592","GHSA-m65x-cfph-rxwm"],"status":"published","title":"A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines...","description":"A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines render when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability.\" This CVE ID is unique from CVE-2017-0224, CVE-2017-0229, CVE-2017-0230, CVE-2017-0234, CVE-2017-0235, CVE-2017-0236, and CVE-2017-0238.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.16992,"percentile":0.9709,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2017-05-12T14:00:00Z","modified":"2026-06-17T00:57:18Z","products":[{"vendor":"microsoft","product":"edge"},{"vendor":"microsoft","product":"internet_explorer"},{"vendor":"microsoft corporation","product":"microsoft browsers"}],"references":[{"url":"http://www.securityfocus.com/bid/98164","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1038425","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securitytracker.com/id/1038426","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0228","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-0228"},{"url":"https://github.com/advisories/GHSA-m65x-cfph-rxwm"}],"sources":{"cve":[{"id":"CVE-2017-0228","description":"A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines render when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability.\" This CVE ID is unique from CVE-2017-0224, CVE-2017-0229, CVE-2017-0230, CVE-2017-0234, CVE-2017-0235, CVE-2017-0236, and CVE-2017-0238.","status":"published","published":"2017-05-12T14:00:00Z","modified":"2024-08-05T12:55:19.319Z","updated_at":"2026-11-02T14:33:22.699876Z"}],"euvd":[{"id":"EUVD-2017-0592","description":"A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines render when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability.\" This CVE ID is unique from CVE-2017-0224, CVE-2017-0229, CVE-2017-0230, CVE-2017-0234, CVE-2017-0235, CVE-2017-0236, and CVE-2017-0238.","status":"published","published":"2017-05-12T14:00:00Z","modified":"2024-08-05T12:55:19Z","updated_at":"2026-11-03T02:39:24.815554Z"}],"ghsa":[{"id":"GHSA-m65x-cfph-rxwm","title":"A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines...","description":"A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines render when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability.\" This CVE ID is unique from CVE-2017-0224, CVE-2017-0229, CVE-2017-0230, CVE-2017-0234, CVE-2017-0235, CVE-2017-0236, and CVE-2017-0238.","status":"published","published":"2022-05-17T02:35:04Z","modified":"2023-01-27T05:05:18Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:42:39.886669Z"}],"nvd":[{"id":"CVE-2017-0228","description":"A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines render when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability.\" This CVE ID is unique from CVE-2017-0224, CVE-2017-0229, CVE-2017-0230, CVE-2017-0234, CVE-2017-0235, CVE-2017-0236, and CVE-2017-0238.","status":"published","published":"2017-05-12T14:29:02.44Z","modified":"2026-06-17T00:57:18.51Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.6,"vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:47.848196Z"}]}}