CVE-2017-11831

CVE-2017-11831 is an information disclosure vulnerability in the Windows kernel affecting various versions of Windows 7, 8.1, 10, and Server editions. It allows a local attacker to run a specially crafted application to compromise the user's system by improperly initializing memory. With a CVSS score of 4.7 (Medium), exploitation requires low privileges and high attack complexity, leading to high confidentiality impact but no integrity or availability impact. While there is no evidence of active exploitation in the wild, a proof-of-concept for memory disclosure exists on ExploitDB, and it has received limited community discussion and media coverage.