CVE-2017-8643LowCVSS 2.4
Microsoft Edge Information Disclosure Vulnerability
🔗 CVE IDs covered (1)
📋 Description
An information disclosure vulnerability exists when Microsoft Edge improperly handles clipboard events. For an attack to be successful, an attacker must persuade a user to visit a malicious website and leave it open during clipboard activities. The update addresses the vulnerability by changing how Microsoft Edge handles clipboard events in the browser.
🎯 Affected products9
- Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems
- Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems
- Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems
- Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems
- Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems
- Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems
- Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems
- Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems
- Microsoft Edge (EdgeHTML-based) on Windows Server 2016
✅ Remediation
KB4038782 (Security Update) KB4038788 (Security Update) KB4038781 (Security Update) KB4038783 (Security Update)
🔗 References (5)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-8643
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4038782
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4038788
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4038781
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4038783