Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-x7ag-wsfq-subh
Vulnerability ID VCID-x7ag-wsfq-subh
Aliases CVE-2017-0208
GHSA-pjpr-2qqp-gprf
Summary Exposure of Sensitive Information to an Unauthorized Actor An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly handle objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, a.k.a. "Scripting Engine Information Disclosure Vulnerability."
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.14872 https://api.first.org/data/v1/epss?cve=CVE-2017-0208
cvssv3.1 4.3 https://github.com/chakra-core/ChakraCore
generic_textual MODERATE https://github.com/chakra-core/ChakraCore
cvssv3.1 4.3 https://github.com/chakra-core/ChakraCore/commit/54d6d085987e2c399863940179db67b594d7f0a3
generic_textual MODERATE https://github.com/chakra-core/ChakraCore/commit/54d6d085987e2c399863940179db67b594d7f0a3
cvssv3.1 4.3 https://github.com/chakra-core/ChakraCore/pull/2834
generic_textual MODERATE https://github.com/chakra-core/ChakraCore/pull/2834
cvssv3.1 4.3 https://nvd.nist.gov/vuln/detail/CVE-2017-0208
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2017-0208
cvssv3.1 4.3 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0208
generic_textual MODERATE https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0208
cvssv3.1 4.3 https://web.archive.org/web/20210124023848/http://www.securityfocus.com/bid/97460
generic_textual MODERATE https://web.archive.org/web/20210124023848/http://www.securityfocus.com/bid/97460
cvssv3.1 4.3 https://web.archive.org/web/20211201121401/http://www.securitytracker.com/id/1038234
generic_textual MODERATE https://web.archive.org/web/20211201121401/http://www.securitytracker.com/id/1038234
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2017-0208
https://github.com/chakra-core/ChakraCore
https://github.com/chakra-core/ChakraCore/commit/54d6d085987e2c399863940179db67b594d7f0a3
https://github.com/chakra-core/ChakraCore/pull/2834
https://web.archive.org/web/20210124023848/http://www.securityfocus.com/bid/97460
https://web.archive.org/web/20211201121401/http://www.securitytracker.com/id/1038234
CVE-2017-0208 https://nvd.nist.gov/vuln/detail/CVE-2017-0208
CVE-2017-0208 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0208
GHSA-pjpr-2qqp-gprf https://github.com/advisories/GHSA-pjpr-2qqp-gprf
No exploits are available.
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Found at https://github.com/chakra-core/ChakraCore
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Found at https://github.com/chakra-core/ChakraCore/commit/54d6d085987e2c399863940179db67b594d7f0a3
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Found at https://github.com/chakra-core/ChakraCore/pull/2834
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2017-0208
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Found at https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0208
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Found at https://web.archive.org/web/20210124023848/http://www.securityfocus.com/bid/97460
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Found at https://web.archive.org/web/20211201121401/http://www.securitytracker.com/id/1038234
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.94637
EPSS Score 0.14872
Published At May 30, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-30T20:59:19.620257+00:00 GitLab Importer Import https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/Microsoft.ChakraCore/CVE-2017-0208.yml 38.6.0