CVE-2017-0222
Microsoft Internet Explorer Remote Code Execution Vulnerability
Published May 12, 2017 · updated Jun 16, 2026 · microsoft internet explorer
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0226.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
May 12, 2017 · Catalog
Detected
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0226.
Feb 25, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Aug 25, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0226.
Required action
Apply updates per vendor instructions.
CISA due date Aug 25, 2022
Affected
- cpe microsoft/internet explorer11
- cpe microsoft/internet explorer9
- vendor Microsoft Internet Explorerversion unspecified
Sources
- CISA KEVConfirmed exploitationCVE-2017-0222
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.
cisa.gov - CVE.orgVulnerability recordCVE-2017-0222
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2017-0222
30-day exploitation probability 29.6%
first.org - NIST NVDVulnerability recordCVE-2017-0222
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0226.
nvd.nist.gov