Netskope Threat Labs

BROWSER-IE Microsoft Edge Scripting Engine array memory corruption attempt

IPS-CFWIPS-SWG

3 SIDs: 45508, 45516, 45517

First seen
March 2023
Last seen
October 2026

Detects web content that exploits CVE-2017-11811 and CVE-2017-11802, memory corruption in Microsoft Edge's scripting engine array handling that can allow code execution. The rule matches the optimization warmup, float writes, and switch dispatch that public exploits use to corrupt array memory.