CVE-2017-0221

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0227 and CVE-2017-0240.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

VendorProductVersions
Microsoft CorporationMicrosoft EdgeWindows 10 Version 1607 for 32-bit Systems and Windows 10 Version 1607 for x64-based Systems.

References

Timeline

Published
May 12, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-02228.8A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory CorCVE-2017-02239.8A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. CVE-2017-02247.5A remote code execution vulnerability exists in the way JavaScript engines render when handling objects in memory in Microsoft Edge, aka "ScCVE-2017-02267.5A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory CorCVE-2017-02277.5A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects CVE-2017-02287.5A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines render when handling objects in memory, akaCVE-2017-02297.5A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "ScCVE-2017-02307.5A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "ScCVE-2017-02314.3A spoofing vulnerability exists when Microsoft browsers render SmartScreen Filter, aka "Microsoft Browser Spoofing Vulnerability."CVE-2017-02338.3An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in theCVE-2017-02347.5A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects inCVE-2017-02357.5A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in
CVE-2017-0221: High severity, CVSS 7.5 | Vulnix