CVE-2017-8643
Microsoft Edge Information Disclosure Vulnerability
CVE-2017-8643 is fixed in 9 products on 1 platform, first by KB4038783, released September 12, 2017. It is not reported as exploited, but the vendor rates exploitation more likely. Patch Radar priority: Urgent.
Urgent
CVSS
2.4
Low
Exploitation
More likely
Vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0584
93rd percentile
<p>An information disclosure vulnerability exists when Microsoft Edge improperly handles clipboard events.</p> <p>For an attack to be successful, an attacker must persuade a user to visit a malicious website and leave it open during clipboard activities.</p> <p>The update addresses the vulnerability by changing how Microsoft Edge handles clipboard events in the browser.</p>
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Microsoft | |||
| Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems | 10586.1106 | KB4038783 | Sep 12, 2017 |
| Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems | 10586.1106 | KB4038783 | Sep 12, 2017 |
| Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems | 14393.1715 | KB4038782 | Sep 12, 2017 |
| Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems | 14393.1715 | KB4038782 | Sep 12, 2017 |
| Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems | 15063.608 | KB4038788 | Sep 12, 2017 |
| Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems | 15063.608 | KB4038788 | Sep 12, 2017 |
| Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems | 10240.17609 | KB4038781 | Sep 12, 2017 |
| Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems | 10240.17609 | KB4038781 | Sep 12, 2017 |
| Microsoft Edge (EdgeHTML-based) on Windows Server 2016 | 14393.1715 | KB4038782 | Sep 12, 2017 |