Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-nrwz-87dy-17aw
Vulnerability ID VCID-nrwz-87dy-17aw
Aliases CVE-2017-0208
GHSA-pjpr-2qqp-gprf
Summary
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.14872 https://api.first.org/data/v1/epss?cve=CVE-2017-0208
epss 0.14872 https://api.first.org/data/v1/epss?cve=CVE-2017-0208
epss 0.14872 https://api.first.org/data/v1/epss?cve=CVE-2017-0208
epss 0.14872 https://api.first.org/data/v1/epss?cve=CVE-2017-0208
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-pjpr-2qqp-gprf
cvssv3.1 4.3 https://github.com/chakra-core/ChakraCore
generic_textual MODERATE https://github.com/chakra-core/ChakraCore
cvssv3.1 4.3 https://github.com/chakra-core/ChakraCore/commit/54d6d085987e2c399863940179db67b594d7f0a3
generic_textual MODERATE https://github.com/chakra-core/ChakraCore/commit/54d6d085987e2c399863940179db67b594d7f0a3
cvssv3.1 4.3 https://github.com/chakra-core/ChakraCore/pull/2834
generic_textual MODERATE https://github.com/chakra-core/ChakraCore/pull/2834
cvssv3.1 4.3 https://nvd.nist.gov/vuln/detail/CVE-2017-0208
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2017-0208
cvssv3.1 4.3 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0208
generic_textual MODERATE https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0208
cvssv3.1 4.3 https://web.archive.org/web/20210124023848/http://www.securityfocus.com/bid/97460
generic_textual MODERATE https://web.archive.org/web/20210124023848/http://www.securityfocus.com/bid/97460
cvssv3.1 4.3 https://web.archive.org/web/20211201121401/http://www.securitytracker.com/id/1038234
generic_textual MODERATE https://web.archive.org/web/20211201121401/http://www.securitytracker.com/id/1038234
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2017-0208
https://github.com/chakra-core/ChakraCore
https://github.com/chakra-core/ChakraCore/commit/54d6d085987e2c399863940179db67b594d7f0a3
https://github.com/chakra-core/ChakraCore/pull/2834
https://nvd.nist.gov/vuln/detail/CVE-2017-0208
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0208
https://web.archive.org/web/20210124023848/http://www.securityfocus.com/bid/97460
https://web.archive.org/web/20211201121401/http://www.securitytracker.com/id/1038234
GHSA-pjpr-2qqp-gprf https://github.com/advisories/GHSA-pjpr-2qqp-gprf
No exploits are available.
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Found at https://github.com/chakra-core/ChakraCore
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Found at https://github.com/chakra-core/ChakraCore/commit/54d6d085987e2c399863940179db67b594d7f0a3
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Found at https://github.com/chakra-core/ChakraCore/pull/2834
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2017-0208
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Found at https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0208
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Found at https://web.archive.org/web/20210124023848/http://www.securityfocus.com/bid/97460
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Found at https://web.archive.org/web/20211201121401/http://www.securitytracker.com/id/1038234
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.94678
EPSS Score 0.14872
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-12T01:36:13.624528+00:00 EPSS Importer Import https://epss.cyentia.com/epss_scores-current.csv.gz 38.6.0