CVE-2017-11906

CVE-2017-11906 is an information disclosure vulnerability in Microsoft Internet Explorer, affecting various versions of Windows and Windows Server. It stems from how Internet Explorer handles objects in memory, allowing an attacker to gain information that could aid in further system compromise. Rated Medium severity (CVSS 5.3), this vulnerability has a network attack vector and high impact on confidentiality, but requires user interaction and has high attack complexity. Its FAUCET Risk Score of 98/100 indicates significant potential risk despite the moderate CVSS score. While not listed in CISA's KEV catalog, an out-of-bounds read exploit (EDB-43372) exists. Community discussion and media coverage are relatively low, suggesting it is not widely exploited in the wild, though its high EPSS score indicates a higher-than-average probability of exploitation.