High severity7.5NVD Advisory· Published Oct 13, 2017· Updated Jun 17, 2026

CVE-2017-11813

Description

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory, aka "Internet Explorer Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11822.

Affected products

Microsoft/Internet Explorer2 versions
cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*
- (no CPE)
Microsoft/Windowsllm-fuzzy
Microsoft Corporation/Internet Explorerv5
Range: Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2.

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11813nvdPatchVendor Advisory
www.securityfocus.com/bid/101083nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1039532nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.006
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000