EXPOSURES › CVE-2017-0149
CVE-2017-0149
HIGH ⌖ ON CISA KEV · EXPLOITEDA memory corruption flaw in Internet Explorer allowed remote attackers to execute code or cause denial-of-service via a crafted website.
This unpatched vulnerability in Internet Explorer enabled remote code execution, a critical failure for any organization relying on legacy browsers. DIBs must ensure all browsers are patched and consider deprecating unsupported products like IE to prevent exploitation in the wild.
Shame score — Microsoft shipped a known, actively exploited memory corruption vulnerability in a widely used product without timely patching, allowing remote code execution.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial-of-service (DoS) via a crafted website.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |