CVE-2017-11839

Microsoft Edge includes a JavaScript-style scripting system that runs code from web pages. This vulnerability is a “memory corruption” bug in that scripting system, meaning a malicious web page can cause the browser to mis-handle memory and potentially give an attacker control of your whole computer. Think of it like a safety latch on a door that can be forced open from outside if you walk in after following the wrong instructions.

This matters if your business PCs run Microsoft Edge on Windows 10 Gold, 1511, 1607, 1703, 1709, or Windows Server 2016/1709. The risk is real even without logins because the attacker only needs a user to open a malicious page. It’s reachable in the default configuration, but the attacker still needs user interaction (someone must browse/open the crafted content).

This is urgent because public exploits exist and the flaw can be used to take complete control of an affected system. Given that it’s reachable by default and doesn’t require a login, you should treat it as a priority update rather than a routine patch. This is consistent with an AMBER risk level: act promptly, especially on internet-facing or heavily used devices.