CVE-2017-11844: Infoleak

Published Nov 15, 2017

Updated

Microsoft Edge in Microsoft Windows 10 1703, 1709 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user's system, due to how Microsoft Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11803 and CVE-2017-11833.

Affected Software

4 affected components

Microsoft Edge

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows Server=1709

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11844

Event History

Nov 15, 2017

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-11844?

CVE-2017-11844 has a medium severity rating allowing for information disclosure.

How do I fix CVE-2017-11844?

To fix CVE-2017-11844, ensure that Microsoft Edge and Windows 10 are updated to the latest version.

Which versions of Microsoft Edge are affected by CVE-2017-11844?

CVE-2017-11844 affects Microsoft Edge on Windows 10 versions 1703 and 1709.

Can CVE-2017-11844 be exploited remotely?

Yes, CVE-2017-11844 can be exploited remotely by attackers to obtain sensitive information.

What type of vulnerability is CVE-2017-11844 classified as?

CVE-2017-11844 is classified as an information disclosure vulnerability.