CVE-2017-11869observed exploitation

CVE-2017-11869: vulnerability in Microsoft Corporation Internet Explorer

Published · Updated

Follow this CVE+ Monitor Internet Explorer

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

25Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Attendepss 9.8%
from disclosure to weapon
Published on NVDNov 15
VulnCheck+362d
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how Microsoft browsers handle objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873.
Affected products
Microsoft Corporation · Internet Explorer
Related CVEs — Microsoft Corporation Internet Explorer

In the same product, most dangerous first.

CVE-2017-0059MEDIUMCVE-2017-0059EPSS 62.0%KEVCVE-2017-0222HIGHCVE-2017-0222EPSS 29.6%KEVCVE-2017-0149HIGHCVE-2017-0149EPSS 28.5%KEVCVE-2017-0210HIGHCVE-2017-0210EPSS 22.3%KEVCVE-2017-11907—CVE-2017-11907EPSS 64.7%CVE-2018-0935—CVE-2018-0935EPSS 55.6%