Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allows remote attackers to execute arbitrary code via vectors involving a crafted Cascading Style Sheets (CSS) token sequence and crafted JavaScript code that operates on a TH element.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| 2022-03-28 | 2022-04-18 | Microsoft Edge and Internet Explorer Type Confusion Vulnerability | Apply updates per vendor instructions. |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 3.1 | 8.1 | HIGH | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| Secondary | 3.1 | 8.1 | HIGH | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| Primary | 2.0 | 7.6 | HIGH | AV:N/AC:H/Au:N/C:C/I:C/A:C |
| Hyperlink | Source | Resource |
|---|---|---|
| http://www.securityfocus.com/bid/96088 | secure@microsoft.com | Broken Link Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1037905 | secure@microsoft.com | Broken Link Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1037906 | secure@microsoft.com | Broken Link Third Party Advisory VDB Entry |
| https://0patch.blogspot.si/2017/03/0patching-another-0-day-internet.html | secure@microsoft.com | Exploit Third Party Advisory |
| https://bugs.chromium.org/p/project-zero/issues/detail?id=1011 | secure@microsoft.com | Exploit Issue Tracking Third Party Advisory |
| https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0037 | secure@microsoft.com | Patch Vendor Advisory |
| https://www.exploit-db.com/exploits/41454/ | secure@microsoft.com | Exploit Third Party Advisory VDB Entry |
| https://www.exploit-db.com/exploits/42354/ | secure@microsoft.com | Exploit Third Party Advisory VDB Entry |
| https://www.exploit-db.com/exploits/43125/ | secure@microsoft.com | Exploit Third Party Advisory VDB Entry |
| http://www.securityfocus.com/bid/96088 | af854a3a-2127-422b-91ae-364da2661108 | Broken Link Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1037905 | af854a3a-2127-422b-91ae-364da2661108 | Broken Link Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1037906 | af854a3a-2127-422b-91ae-364da2661108 | Broken Link Third Party Advisory VDB Entry |
| https://0patch.blogspot.si/2017/03/0patching-another-0-day-internet.html | af854a3a-2127-422b-91ae-364da2661108 | Exploit Third Party Advisory |
| https://bugs.chromium.org/p/project-zero/issues/detail?id=1011 | af854a3a-2127-422b-91ae-364da2661108 | Exploit Issue Tracking Third Party Advisory |
| https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0037 | af854a3a-2127-422b-91ae-364da2661108 | Patch Vendor Advisory |
| https://www.exploit-db.com/exploits/41454/ | af854a3a-2127-422b-91ae-364da2661108 | Exploit Third Party Advisory VDB Entry |
| https://www.exploit-db.com/exploits/42354/ | af854a3a-2127-422b-91ae-364da2661108 | Exploit Third Party Advisory VDB Entry |
| https://www.exploit-db.com/exploits/43125/ | af854a3a-2127-422b-91ae-364da2661108 | Exploit Third Party Advisory VDB Entry |
| https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0037 | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | N/A |