CVE-2017-0059

Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0008 and CVE-2017-0009.

CVSS v3.1

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CVSS v3.1

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

61.97% chance of exploitation in the next 30 days, 99th percentile

CISA KEV

added 2022-03-28

Published

2017-03-17

Updated

2025-10-21

ExploitDB entries (3)

• https://www.exploit-db.com/exploits/43125
• https://www.exploit-db.com/exploits/41661
• https://www.exploit-db.com/exploits/42354

References

• CVE Record
• NVD entry

Related

• CVE-2017-0058
• CVE-2017-0060
• CVE-2017-0055
• CVE-2017-0061
• CVE-2017-0045
• CVE-2017-0062