CVE-2017-11831

🗓️ 15 Nov 2017 03:00:00Reported by microsoftType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 90 Views

CVE-2017-11831 Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log on to an affected system, and run a specially crafted application that can compromise the user's system due to how the Windows kernel initializes memory, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11880

Reporter	Title	Published	Views	Family All 46
0day.today	Microsoft Windows 10 - nt!NtQueryDirectoryFile (luafv!LuafvCopyDirectoryEntry) Pool Memory Disclosur	22 Nov 201700:00	–	zdt
ATTACKERKB	CVE-2017-11880	15 Nov 201703:29	–	attackerkb
ATTACKERKB	CVE-2017-11831	15 Nov 201703:29	–	attackerkb
Circl	CVE-2017-11831	21 Nov 201700:00	–	circl
CNVD	Microsoft Windows Kernel Information Disclosure Vulnerability (CNVD-2017-37110)	16 Nov 201700:00	–	cnvd
Cvelist	CVE-2017-11831	15 Nov 201703:00	–	cvelist
EUVD	EUVD-2017-3431	7 Oct 202500:30	–	euvd
Microsoft KB	Description of the security update for the information disclosure vulnerability in Windows Server 2008: November 14, 2017	14 Nov 201708:00	–	mskb
Microsoft KB	November 14, 2017—KB4048952 (OS Build 10586.1232)	14 Nov 201708:00	–	mskb
Microsoft KB	November 14, 2017—KB4048953 (OS Build 14393.1884)	14 Nov 201708:00	–	mskb

NVD

Node

microsoft windows_10Match-

microsoft windows_10Match1511

microsoft windows_10Match1607

microsoft windows_10Match1703

microsoft windows_10Match1709

microsoft windows_7Match-sp1

microsoft windows_8.1Match-

microsoft windows_rt_8.1Match-

microsoft windows_serverMatch1709

microsoft windows_server_2008Match-

microsoft windows_server_2008Matchr2sp1

microsoft windows_server_2012

microsoft windows_server_2012Matchr2

microsoft windows_server_2016Match-

[
  {
    "product": "Windows kernel",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "aWindows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016, and Windows Server, version 1709."
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/101721
exploit-db	www.exploit-db.com/exploits/43165/
securitytracker	www.securitytracker.com/id/1039782
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11831

13 May 2026 00:24Current

5.2Medium risk

Vulners AI Score5.2

CVSS 34.7

CVSS 24.7

EPSS0.02972

CWE-200