CVE-2017-8594 Internet Explorer on Microsoft Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in th

What is CVE-2017-8594?

CVE-2017-8594 is a high-severity vulnerability in Microsoft Internet Explorer, published on 11 Jul 2017.

Official description

Internet Explorer on Microsoft Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability".

Weakness: CWE-119

Which versions are affected by CVE-2017-8594?

It affects 1 product.

Products include Microsoft Internet Explorer.

How do I fix CVE-2017-8594?

No fix has been published for CVE-2017-8594 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-8594 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2017-8594 exists.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in Microsoft Internet Explorer

• CVE-2014-1776 Microsoft Internet Explorer Memory Corruption Exploited Critical 9.8
• CVE-2021-27085 Microsoft Internet Explorer Remote Code Execution Exploited High 8.8
• CVE-2017-0222 Microsoft Internet Explorer Remote Code Execution Exploited High 8.8
• CVE-2017-0210 Microsoft Internet Explorer Privilege Escalation Exploited High 8.8
• CVE-2017-0149 Microsoft Internet Explorer Memory Corruption Exploited High 8.8

All Microsoft Internet Explorer vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-wgj7-93x5-5q4w.