Low severity3.1NVD Advisory· Published Nov 15, 2017· Updated May 13, 2026

CVE-2017-11833

Description

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to determine the origin of all webpages in the affected browser, due to how Microsoft Edge handles cross-origin requests, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11803 and CVE-2017-11844.

Affected products

Microsoft/Edge2 versions
cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*
- (no CPE)
Microsoft Corporation/Microsoft Edgev5
Range: Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11833nvdPatchVendor Advisory
www.securityfocus.com/bid/101706nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1039797nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.202
epss	0.010
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000