What is CVE-2017-8619?

CVE-2017-8619 is a high-severity vulnerability in Microsoft Edge, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 7.5/10. Published 2017-07-11.

How severe is CVE-2017-8619?

High severity. CVSS v3 base score is 7.5 out of 10.

Is CVE-2017-8619 known to be exploited?

4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Microsoft Edge

CVE-2017-8619

Microsoft Edge on Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way affected Microsoft scripting engines render when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-8596, CVE-2017-8610, CVE-2017-8601, CVE-2017-8603, CVE-2017-8604, CVE-2017-8605, CVE-2017-8606, CVE-2017-8607, CVE-2017-8608, CVE-2017-8618, CVE-2017-9598 and CVE-2017-8609.

Vulnerability class: Buffer Overflow

Published 2017-07-11 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.159 (96.8th percentile), scored 2026-10-06.

Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 97th percentile — 96.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.159 · newest: 0.159 · change: 0.000

Affected products

Microsoft Edge
Microsoft Windows 10 — versions 1511, 1607, 1703
Microsoft Windows Server 2016
Microsoft Corporation Windows 10 Gold, 1511, 1607, And 1703, Server 2016 — versions Microsoft Edge

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

References

www.securitytracker.com/id/1038849 (VDB Entry, Third Party Advisory, vdb-entry)
portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8619 (Patch, Vendor Advisory)
www.securityfocus.com/bid/99392 (VDB Entry, Third Party Advisory, vdb-entry)

Frequently asked questions

What is CVE-2017-8619?: CVE-2017-8619 is a high-severity vulnerability in Microsoft Edge, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 7.5/10. Published 2017-07-11.
How severe is CVE-2017-8619?: High severity. CVSS v3 base score is 7.5 out of 10.
Is CVE-2017-8619 known to be exploited?: 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.