Netskope Threat Labs

BROWSER-IE Microsoft Edge VBScript VarType out of bounds read attempt

IPS-SWG

1 SID: 43471

First seen
February 2022
Last seen
October 2026

Detects web content that exploits CVE-2017-8618, an out-of-bounds read in Internet Explorer's VBScript engine triggered through VarType queries that can leak memory. The rule matches the VBScript class definitions and type queries that public exploits use to read beyond allocated buffers.