CVE-2017-11834

—

CVSS 3.0

5.3 medium

EPSS

13%p96

Published

Nov 15, 2017 (Nov 15, 2017)

Modified

Jun 17, 2026

Description

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11791.

Vendors: microsoft
Products: internet explorer
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (12.7%)

In the news2 stories

Palo Alto Networks Unit 42 Vulnerability Research November 2017 Disclosures

Palo Alto Unit 42Jan 28, 21:28 UTC · Jan 28, 2022Vulnerability CVE-2017-11855 CVE-2017-11856 CVE-2017-11791+1 CVEs

Microsoft Patch Tuesday

Cisco TalosNov 14, 19:54 UTC · Nov 14, 2017Vulnerability CVE-2017-16367 CVE-2017-11836 CVE-2017-11837+47 CVEs