CVE-2017-11914: ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attac...

Security readout for executives and security teams

CVE-2017-11914 is a memory corruption flaw in Microsoft Edge's Chakra scripting engine. If triggered, it could let an attacker gain the same rights as the signed-in user. Business risk is highest where old Windows 10 builds or Windows Server 2016 systems still run affected Microsoft Edge components. Exposure is limited to systems matching the listed affected platforms: Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 with ChakraCore or Microsoft Edge components. Modern unsupported-status or patch state is not established by the bundle. Treat this as a high-priority legacy Windows risk if affected builds remain in service. The issue can run attacker-controlled code with the user's rights, and public exploit material is referenced. If the environment no longer uses these platforms, priority drops to confirmation and documentation. Mitigation focus: Review the Microsoft MSRC advisory for the official update or workaround status.; Apply applicable Microsoft security updates to affected Windows and Edge installations.; Retire or isolate legacy Windows 10 builds listed as affected where possible..

Prepared

Jun 12, 2026, 19:33 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.