Medium severity4.3NVD Advisory· Published Nov 15, 2017· Updated Jun 17, 2026

CVE-2017-11844

Description

Microsoft Edge in Microsoft Windows 10 1703, 1709 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user's system, due to how Microsoft Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11803 and CVE-2017-11833.

Affected products

Microsoft/Edge2 versions
cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*
- (no CPE)
Microsoft/Windowsllm-fuzzy
Range: 10 1703, 1709 and Server 1709
Microsoft Corporation/Microsoft Edgev5
Range: Microsoft Windows 10 1703, 1709 and Windows Server, version 1709.

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11844nvdPatchVendor Advisory
www.securityfocus.com/bid/101707nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1039797nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.005
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000