Low severity3.1NVD Advisory· Published Nov 15, 2017· Updated Jun 17, 2026

CVE-2017-11833

Description

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to determine the origin of all webpages in the affected browser, due to how Microsoft Edge handles cross-origin requests, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11803 and CVE-2017-11844.

Affected products

Microsoft/Edge2 versions
cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*
- (no CPE)
Microsoft/Windowsllm-fuzzy
Range: 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016, Windows Server 1709
Microsoft Corporation/Microsoft Edgev5
Range: Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709.

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11833nvdPatchVendor Advisory
www.securityfocus.com/bid/101706nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1039797nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.202
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000