High severity7.5NVD Advisory· Published Oct 13, 2017· Updated May 13, 2026

CVE-2017-11819

Description

Microsoft Windows 7 SP1 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft browsers handle objects in memory, aka "Windows Shell Remote Code Execution Vulnerability".

Affected products

Microsoft Corporation/Microsoft Windows 7 SP1v5
Range: Microsoft Windows 7 SP1

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11819nvdPatchVendor Advisory
www.securityfocus.com/bid/101121nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1039537nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.021
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000