How severe is CVE-2017-11874?

This vulnerability has a severity rating of LOW with a CVSS score of 3.1 out of 10.

What type of vulnerability is CVE-2017-11874?

This is classified as NVD-CWE-Other, which is a common weakness in software security.

CVE-2017-11874 - LOW Severity | CVSS 3.1

Vulnerability Description

Microsoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore allows an attacker to bypass Control Flow Guard (CFG) to run arbitrary code on a target system, due to how Microsoft Edge handles accessing memory in code compiled by the Edge Just-In-Time (JIT) compiler, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-11863 and CVE-2017-11872.

Related Vulnerabilities

CVE-2016-3426

LOW

CVSS:3.1(Low)

Unspecified vulnerability in Oracle Java SE 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality via vectors related to JCE.

NVD-CWE-Other2016

CVE-2016-3428

LOW

CVSS:3.1(Low)

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect availability via vectors...

NVD-CWE-Other2016

CVE-2016-3516

LOW

CVSS:3.1(Low)

Unspecified vulnerability in the Oracle Enterprise Communications Broker component in Oracle Communications Applications before PCz 2.0.0m4p1 allows remote authenticated users to affect confidentialit...

NVD-CWE-Other2016

CVE-2016-5473

LOW

CVSS:3.1(Low)

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via vectors related to Fil...

NVD-CWE-Other2016

CVE-2016-5509

LOW

CVSS:3.1(Low)

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 ...

NVD-CWE-Other2016

CVE-2016-5542

LOW

CVSS:3.1(Low)

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to Libraries.

NVD-CWE-Other2016