Lucene search

K
mscveMicrosoftMS:CVE-2017-11842
HistoryNov 14, 2017 - 8:00 a.m.

Windows Kernel Information Disclosure Vulnerability

2017-11-1408:00:00
Microsoft
msrc.microsoft.com
13

0.001 Low

EPSS

Percentile

30.0%

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.

To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.

The security update addresses the vulnerability by correcting how the Windows kernel initializes memory.