CVE-2017-11831
Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log on to an affected system, and run a specially crafted application that can compromise the user's system due to how the Windows kernel initializes memory, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11880.
Key facts
- CVSS score
- 4.7 (v3.0)
- Severity
- MEDIUM
- CVSS vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N- Weakness (CWE)
- CWE-200
- EPSS score
- 3.3% (88th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2017-3431)
- Published
- November 15, 2017
- NVD last modified
- June 17, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2017-3431 in the EU Vulnerability Database. Last updated in EUVD on September 16, 2024.
View on the EU Vulnerability DatabaseAffected products
- microsoft / windows 10
- microsoft / windows 10
- microsoft / windows 10
- microsoft / windows 10
- microsoft / windows 10
- microsoft / windows 7
- microsoft / windows 8.1
- microsoft / windows rt 8.1
- microsoft / windows server
- microsoft / windows server 2008
- microsoft / windows server 2008
- microsoft / windows server 2012
- microsoft / windows server 2012
- microsoft / windows server 2016
Certified products that may be affected
12 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.
- Microsoft Windows Server 2008 R2 Hyper-V Release 6.1.7600 - Microsoft Corporation - Common Criteria BSI-DSZ-CC-0755-2012 - archived
- Microsoft Windows 7, Microsoft Windows Server 2008 R2 - Microsoft Corporation - Common Criteria CCEVS-VR-10390-2010 - archived
- Windows 7 BitLocker™ Drive Encryption - Microsoft Corporation - FIPS 140 1332 - historical
- Windows Server 2008 R2 BitLocker™ Drive Encryption - Microsoft Corporation - FIPS 140 1339 - historical
- Windows Server 2008 R2 Enhanced Cryptographic Provider (RSAENH) - Microsoft Corporation - FIPS 140 1337 - historical
See all 12 in the Security Certifications Explorer.
References
- http://www.securityfocus.com/bid/101721(Third Party Advisory, VDB Entry)
- http://www.securitytracker.com/id/1039782(Third Party Advisory, VDB Entry)
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11831(Patch, Vendor Advisory)
- https://www.exploit-db.com/exploits/43165/(Third Party Advisory, VDB Entry)
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain