CVE-2017-0037

Microsoft Edge and Internet Explorer Type Confusion Vulnerability

8.1
CVSS 3.1
80.4 %
EPSS (current)
2022-03-28
KEV addition
No
Ransomware

Timeline

Publication, first public exploit and KEV addition on a day axis.

Key facts

Vendor / product: Microsoft / Edge and Internet Explorer

Published: 2017-02-26 · Due (CISA): 2022-04-18

CWE: CWE-843 · EU list: no

Exploit references (metadata only)

SourceReferenceTitleDate
exploitdb41454Microsoft Edge / Internet Explorer - 'HandleColumnBreakOnColumnSpanningElement' Type Confusion2017-02-24
exploitdb42354Microsoft Internet Explorer - 'mshtml.dll' Remote Code Execution (MS17-007)2017-07-24
exploitdb43125Microsoft Internet Explorer 11 (Windows 7 x86) - 'mshtml.dll' Remote Code Execution (MS17-007)2017-10-17

References only — no downloads or instructions.

Sources