KLA11112
Multiple vulnerabilities in Microsoft Browsers

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A memory corruption vulnerability in Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
2. A memory corruption vulnerability in Internet Explorer can be exploited remotely via specially crafted website to execute arbitrary code.
3. An information disclosure vulnerability in Internet Explorer can be exploited remotely via specially crafted content to obtain sensitive information.
4. An information disclosure vulnerability in Microsoft Edge based on Edge HTML can be exploited remotely via specially crafted content to obtain sensitive information.
5. A memory corruption vulnerability in Scripting Engine can be exploited remotely to execute arbitrary code.

Microsoft Edge (EdgeHTML-based)
Internet Explorer 9
Internet Explorer 10
ChakraCore
Internet Explorer 11

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

CVE-2017-11810
CVE-2017-11811
CVE-2017-11812
CVE-2017-11813
CVE-2017-11790
CVE-2017-11792
CVE-2017-11793
CVE-2017-11794
CVE-2017-11796
CVE-2017-11798
CVE-2017-11800
CVE-2017-11805
CVE-2017-11808
CVE-2017-11804
CVE-2017-11809
CVE-2017-11799
CVE-2017-11822
CVE-2017-11806
CVE-2017-11802
CVE-2017-11807
CVE-2017-8726
CVE-2017-11821
CVE-2017-11797
CVE-2017-11801

4041689
4041693
4041676
4041690
4041681
4041691
4042895
4040685

The following public exploits exists for this vulnerability:

https://www.exploit-db.com/exploits/43131

https://www.exploit-db.com/exploits/43152

https://www.exploit-db.com/exploits/43368

https://www.exploit-db.com/exploits/42999

https://www.exploit-db.com/exploits/42998

https://www.exploit-db.com/exploits/43000