{"id":"CVE-2017-8648","state":"PUBLISHED","title":"Microsoft Edge in Microsoft Windows Version 1703 allows an attacker to obtain information to further compromise the user's system, due to the way that Microsoft Edge handles object","description":"Microsoft Edge in Microsoft Windows Version 1703 allows an attacker to obtain information to further compromise the user's system, due to the way that Microsoft Edge handles objects in memory, aka \"Microsoft Edge Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8597 and CVE-2017-8643.","publishedAt":"2017-09-13T01:00:00.000Z","updatedAt":"2024-09-16T20:22:30.649Z","severity":null,"assigner":"microsoft","products":["Microsoft Corporation Microsoft Edge"],"affected":[{"vendor":"Microsoft Corporation","product":"Microsoft Edge","versions":[{"version":"Microsoft Windows Version 1703","status":"affected"}]}],"references":["http://www.securitytracker.com/id/1039326","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8648","http://www.securityfocus.com/bid/100750"],"weaknesses":[],"ingestedAt":"2026-10-29T19:43:57.959Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2017/8xxx/CVE-2017-8648.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2017-8648","state":"PUBLISHED","datePublished":"2017-09-13T01:00:00.000Z","dateUpdated":"2024-09-16T20:22:30.649Z","assignerShortName":"microsoft","assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateReserved":"2017-05-03T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Microsoft Edge in Microsoft Windows Version 1703 allows an attacker to obtain information to further compromise the user's system, due to the way that Microsoft Edge handles objects in memory, aka \"Microsoft Edge Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8597 and CVE-2017-8643."}],"affected":[{"vendor":"Microsoft Corporation","product":"Microsoft Edge","versions":[{"version":"Microsoft Windows Version 1703","status":"affected"}]}],"references":[{"url":"http://www.securitytracker.com/id/1039326","name":"1039326","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8648","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/100750","name":"100750","tags":["vdb-entry","x_refsource_BID"]}],"problemTypes":[{"descriptions":[{"description":"Information Disclosure","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"microsoft","dateUpdated":"2017-09-13T09:57:01.000Z","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8"},"datePublic":"2017-09-12T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secure@microsoft.com","DATE_PUBLIC":"2017-09-12T00:00:00","ID":"CVE-2017-8648","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Microsoft Edge","version":{"version_data":[{"version_value":"Microsoft Windows Version 1703"}]}}]},"vendor_name":"Microsoft Corporation"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Microsoft Edge in Microsoft Windows Version 1703 allows an attacker to obtain information to further compromise the user's system, due to the way that Microsoft Edge handles objects in memory, aka \"Microsoft Edge Information Disclosure Vulnerability\". This CVE ID is unique from CVE-2017-8597 and CVE-2017-8643."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Information Disclosure"}]}]},"references":{"reference_data":[{"name":"1039326","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1039326"},{"name":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8648","refsource":"CONFIRM","url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8648"},{"name":"100750","refsource":"BID","url":"http://www.securityfocus.com/bid/100750"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.securitytracker.com/id/1039326","name":"1039326","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8648","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/100750","name":"100750","tags":["vdb-entry","x_refsource_BID","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T16:41:24.187Z"}}]}}}