CVE-2017-11768

CVE-2017-11768 is an information disclosure vulnerability in Windows Media Player across various Windows operating systems, including Windows 7, 8.1, 10, and Server versions. An attacker can remotely test for the presence of files on disk through a specially crafted application. This vulnerability has a low CVSS score of 2.5, indicating low attack complexity and localized impact, primarily disclosing file information without affecting integrity or availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog. Community discussion and media coverage are minimal, suggesting limited external attention.