KLA11098 Multiple vulnerabilities in Microsoft Edge and Microsoft Internet Explorer

Multiple serious vulnerabilities have been found in Microsoft Edge and Microsoft Internet Explorer. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, bypass security restrictions and spoof user interface.

Below is a complete list of vulnerabilities:

1. Multiple vulnerabilities related to improper handling of objects in memory in Microsoft Edge can be exploited remotely via a specially designed website to obtain sensitive information;
2. An improper handling of clipboard events in Microsoft Edge can be exploited remotely via a specially designed website to obtain sensitive information;
3. An incorrect parent domain verification in Microsoft browsers can be exploited remotely via a specially designed website to obtain sensitive information;
4. An incorrect handling of objects in memory in the scripting engine in Microsoft Edge can be exploited remotely via a specially designed website to obtain sensitive information;
5. Multiple vulnerabilities related to incorrect handling of objects in memory in the scripting engine in Microsoft Edge can be exploited remotely via a specially designed website to execute arbitrary code;
6. Multiple vulnerabilities related to improper access of objects in memory in Microsoft browsers can be exploited remotely via a specially designed website to execute arbitrary code;
7. Multiple vulnerabilities related to improper handling of objects in memory in JavaScript engines in Microsoft browsers during rendering content can be exploited remotely via a specially designed website to execute arbitrary code;
8. Multiple vulnerabilities related to improper validation of documents in Microsoft Edge can be exploited remotely via a specially designed website to bypass security restrictions;
9. Multiple vulnerabilities related to incorrect parsing of HTTP content in Microsoft Edge can be exploited remotely via a specially designed website to spoof user interface;
10. An improper handling of HTTP content in Microsoft Internet Explorer can be exploited remotely via a specially designed website to spoof user interface;
11. Multiple vulnerabilities related to incorrect handling of objects in memory in Microsoft Windows PDF Library can be exploited remotely via a specially designed website to execute arbitrary code.

NB: Not every vulnerability already has CVSS rating, so cumulative CVSS rating can be not representative.

Original advisories

CVE-2017-8756

CVE-2017-8747

CVE-2017-8734

CVE-2017-8729

CVE-2017-8728

CVE-2017-8757

CVE-2017-8749

CVE-2017-8738

CVE-2017-11766

CVE-2017-8750

CVE-2017-8731

CVE-2017-8753

CVE-2017-8723

CVE-2017-8724

CVE-2017-8741

CVE-2017-8754

CVE-2017-8740

CVE-2017-8752

CVE-2017-8597

CVE-2017-8660

CVE-2017-8736

CVE-2017-11764

CVE-2017-8643

CVE-2017-8751

CVE-2017-8649

CVE-2017-8748

CVE-2017-8755

CVE-2017-8737

CVE-2017-8648

CVE-2017-8739

CVE-2017-8735

CVE-2017-8733

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

Microsoft-Internet-Explorer

Microsoft-Edge

CVE list

CVE-2017-8756 critical

CVE-2017-8747 critical

CVE-2017-8734 critical

CVE-2017-8729 critical

CVE-2017-8728 critical

CVE-2017-8757 critical

CVE-2017-8749 critical

CVE-2017-8738 critical

CVE-2017-11766 critical

CVE-2017-8750 critical

CVE-2017-8731 critical

CVE-2017-8753 critical

CVE-2017-8723 warning

CVE-2017-8724 warning

CVE-2017-8741 critical

CVE-2017-8754 warning

CVE-2017-8740 critical

CVE-2017-8752 critical

CVE-2017-8597 warning

CVE-2017-8660 critical

CVE-2017-8736 warning

CVE-2017-11764 critical

CVE-2017-8643 warning

CVE-2017-8751 critical

CVE-2017-8649 critical

CVE-2017-8748 critical

CVE-2017-8755 critical

CVE-2017-8737 critical

CVE-2017-8648 warning

CVE-2017-8739 warning

CVE-2017-8735 warning

CVE-2017-8733 warning

KB list

4038788

4038782

4038783

4038792

4038799

4038781

4038777

4036586

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

• SUI

Spoof user interface. Exploitation of vulnerabilities with this impact can lead to changes in user interface to beguile user into inaccurate behavior.

Affected Products

• Microsoft Internet Explorer versions 9 through 11Microsoft Edge