CVE-2017-11833: Infoleak

Published Nov 15, 2017

Updated

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to determine the origin of all webpages in the affected browser, due to how Microsoft Edge handles cross-origin requests, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11803 and CVE-2017-11844.

Affected Software

7 affected components

Microsoft Edge

Microsoft Windows 10

Microsoft Windows 10=1511

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows Server 2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11833

Event History

Nov 15, 2017

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-11833?

CVE-2017-11833 has a severity rating of moderate.

How do I fix CVE-2017-11833?

To fix CVE-2017-11833, ensure that Microsoft Edge is updated to the latest version provided by Microsoft.

What software is affected by CVE-2017-11833?

CVE-2017-11833 affects Microsoft Edge on Windows 10 versions 1511, 1607, 1703, and 1709, as well as Windows Server 2016.

What kind of vulnerability is CVE-2017-11833?

CVE-2017-11833 is an information disclosure vulnerability due to improper handling of cross-origin requests.

Can CVE-2017-11833 be exploited remotely?

Yes, an attacker can exploit CVE-2017-11833 remotely to determine the origin of all webpages in the affected browser.