CVE-2017-11815

CVE-2017-11815 is an information disclosure vulnerability affecting Microsoft Windows operating systems, including Windows 7, 8.1, 10, and various Windows Server versions, stemming from how the Server Message Block (SMB) protocol handles specific requests. This medium-severity flaw (CVSS 5.3) allows an unauthenticated attacker to remotely disclose sensitive information with high confidentiality impact, though it requires high attack complexity. While no public exploit code (Metasploit, Nuclei, ExploitDB) is available, the vulnerability received notable community discussion and media coverage at the time of its disclosure. It is not currently listed in CISA's KEV catalog, indicating no known active exploitation.