CVE-2017-11822

—

CVSS 3.0

7.5 high

EPSS

8%p95

Published

Oct 13, 2017 (Oct 13, 2017)

Modified

Jun 17, 2026

Description

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory, aka "Internet Explorer Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11813.

Vendors: microsoft
Products: internet explorer
Weakness: CWE-119
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (8.5%)

In the news2 stories

Microsoft Patch Tuesday

Cisco TalosOct 10, 20:25 UTC · Oct 10, 2017Vulnerability CVE-2017-11813 CVE-2017-11822 CVE-2017-11762+38 CVEs

Palo Alto Networks Unit 42 Vulnerability Research September and October 2017 Disclosures

Palo Alto Unit 42Jan 28, 21:29 UTC · Jan 28, 2022Vulnerability CVE-2017-8567 CVE-2017-8749 CVE-2017-11793+1 CVEs