Information disclosure in Microsoft Edge - CVE-2017-11803
Published: November 14, 2017
Vulnerability identifier: #VU9264
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-11803
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.
The vulnerability exists due to improper handling of objects in memory by Microsoft Edge. A remote attacker can create a specially crafted Web site, trick the victim into visiting it and read arbitrary data.
Successful exploitation of this vulnerability results in information disclosure.
Affected software
Microsoft Edge
How to mitigate CVE-2017-11803
Install updates from vendor's website.