CVE-2017-11833

Severity: low (CVSS 3.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-11-15 · updated 2026-06-17
Weakness: CWE-200

Description

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to determine the origin of all webpages in the affected browser, due to how Microsoft Edge handles cross-origin requests, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11803 and CVE-2017-11844.

Affected products

Microsoft Edge: all versions
Microsoft Edge: Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709.

References

http://www.securityfocus.com/bid/101706
http://www.securitytracker.com/id/1039797
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11833
http://www.securityfocus.com/bid/101706
http://www.securitytracker.com/id/1039797
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11833

Get alerted when CVE-2017-11833 or the next vulnerability affects your stack