CVE-2017-11831: microsoft corporation windows kernel
Vulnerability summary
CVE-2017-11831 is a medium (CVSS 4.7) vulnerability in microsoft corporation windows kernel. EPSS estimates a 3.33% chance of exploitation in the next 30 days, higher than 88.4% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 15-11-2017PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log on to an affected system, and run a specially crafted application that can compromise the user's system due to how the Windows kernel initializes memory, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11880.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
3.33%
Chance of exploitation in the next 30 days
Percentile
88%
Versus all other CVEs
30-day change
0.00 pp
From 3.33% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMicrosoft Windows 10 - 'nt!NtQueryDirectoryFile (luafv!LuafvCopyDirectoryEntry)' Pool Memory Disclosure
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Microsoft8 products
- windows_10na | 1511 | 1607 | 1703 | 1709
- windows_7na
- windows_8.1na
- windows_rt_8.1na
- windows_server1709
Microsoft corporation1 product
- windows kernelaWindows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016, and Windows Server, version 1709.
2 vendors · 9 products
References
4 links
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11831X Refsource CONFIRMPatchVendor Advisory