CVE-2017-0059
Microsoft Corporation Internet Explorer
Published 17 Mar 2017 · updated 17 Jun 2026 · Analyzed
4.3 Medium · CVSS 3.1, NVD
Exploited in the wild
CISA added this to its Known Exploited Vulnerabilities catalog on 28 Mar 2022, with a remediation deadline of 18 Apr 2022 for US federal agencies.
Required action: Apply updates per vendor instructions.
Description
Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0008 and CVE-2017-0009.
References
- www.securityfocus.com/bid/96645 · Broken Link, Third Party Advisory, VDB Entry
- www.securitytracker.com/id/1038008 · Broken Link, Third Party Advisory, VDB Entry
- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0059 · Patch, Vendor Advisory
- www.exploit-db.com/exploits/41661/ · Exploit, Third Party Advisory, VDB Entry
- www.exploit-db.com/exploits/42354/ · Exploit, Third Party Advisory, VDB Entry
- www.exploit-db.com/exploits/43125/ · Exploit, Third Party Advisory, VDB Entry
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0059 · US Government Resource