Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2017-11794
HistoryOct 13, 2017 - 1:29 p.m.

CVE-2017-11794

2017-10-1313:29:00
CWE-200
[email protected]
web.nvd.nist.gov
38
2
microsoft edge
windows 10
cve-2017-11794
information disclosure
memory handling
vulnerability

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

4.1 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

72.3%

JSON

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user’s system, due to how Microsoft Edge handles objects in memory, aka “Microsoft Edge Information Disclosure Vulnerability”. This CVE ID is unique from CVE-2017-8726 and CVE-2017-11803.

CPENameOperatorVersion
microsoft:edgemicrosoft edgeeq*

Social References

More

Related

cve 4
cvelist 5
prion 5
mscve 3
symantec 3
zdi 1
kaspersky 2
myhack58 1
openvas 6
mskb 6
nessus 6
talosblog 2
trendmicroblog 2
cve
cve
CVE-2017-8726
2017-10-13 13:29:00
CVE-2017-11803
2017-11-15 03:29:00
CVE-2017-11844
2017-11-15 03:29:00
cvelist
cvelist
CVE-2017-11794
2017-10-10 00:00:00
CVE-2017-8726
2017-10-10 00:00:00
CVE-2017-11833
2017-11-14 00:00:00
prion
prion
Information disclosure
2017-10-13 13:29:00
Memory corruption
2017-10-13 13:29:00
Information disclosure
2017-11-15 03:29:00
mscve
mscve
Microsoft Edge based on Edge HTML Information Disclosure Vulnerability
2017-10-10 07:00:00
Microsoft Edge based on Edge HTML Information Disclosure Vulnerability
2017-11-14 08:00:00
Microsoft Edge based on Edge HTML Information Disclosure Vulnerability
2017-10-10 07:00:00
symantec
symantec
Microsoft Edge CVE-2017-11794 Information Disclosure Vulnerability
2017-10-10 00:00:00
Microsoft Edge CVE-2017-11803 Information Disclosure Vulnerability
2017-11-14 00:00:00
Microsoft Edge Scripting Engine CVE-2017-8726 Remote Memory Corruption Vulnerability
2017-10-10 00:00:00
zdi
zdi
Microsoft Edge substringData Use-After-Free Information Disclosure Vulnerability
2017-10-10 00:00:00
kaspersky
kaspersky
KLA11112 Multiple vulnerabilities in Microsoft Browsers
2017-10-10 00:00:00
KLA11140 Multiple vulnerabilities in Microsoft Edge and Internet Explorer
2017-11-14 00:00:00
myhack58
myhack58
Microsoft windows October release of the 62 flaws vulnerability bug patch, and repair of the National researchers submitted the 0-day flaw vulnerability bug-vulnerability warning-the black bar safety net
2017-10-12 00:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB4041676)
2017-10-11 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4048955)
2017-11-15 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4048954)
2017-11-15 00:00:00
mskb
mskb
October 10, 2017—KB4041676 (OS Build 15063.674)
2017-10-16 07:00:00
November 14, 2017—KB4048954 (OS Build 15063.726 and 15063.728)
2017-11-14 08:00:00
November 14, 2017—KB4048955 (OS Build 16299.64)
2017-11-14 08:00:00
nessus
nessus
KB4041676: Windows 10 Version 1703 October 2017 Cumulative Update (KRACK)
2017-10-10 00:00:00
KB4048955: Windows 10 Version 1709 and Windows Server Version 1709 November 2017 Cumulative Update
2017-11-14 00:00:00
KB4048954: Windows 10 Version 1703 November 2017 Cumulative Update
2017-11-14 00:00:00
talosblog
talosblog
Microsoft Patch Tuesday - October 2017
2017-10-10 13:25:00
Microsoft Patch Tuesday - November 2017
2017-11-14 11:54:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of October 9, 2017
2017-10-13 14:03:59
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of November 13, 2017
2017-11-17 16:46:19

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

4.1 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

72.3%

JSON
Related for CVE-2017-11794
cve4cvelist5prion5mscve3symantec3zdi1kaspersky2myhack581openvas6mskb6nessus6talosblog2trendmicroblog2