CVE-2017-0210

Katalog CVE

CVSS 8.8 · High KEV · sudah dieksploitasi EPSS 22,3%

Kerentanan pada microsoft internet explorer. Skor CVSS 3.1 8.8 (High) menurut NVD. Masuk katalog KEV CISA pada 24 Mei 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Internet Explorer Elevation of Privilege Vulnerability."

Rincian

Terbit di NVD

12 April 2017

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

22,3% peluang dieksploitasi; lebih tinggi dari 97,6% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Microsoft Internet Explorer Privilege Escalation Vulnerability

Masuk KEV

24 Mei 2022

Tenggat CISA

14 Juni 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0210 patch · advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0210 pemerintah AS
• http://www.securityfocus.com/bid/97512 broken link · advisory pihak ketiga · vdb entry
• http://www.securitytracker.com/id/1038238 broken link · advisory pihak ketiga · vdb entry