CVE-2017-0059VulnerabilityPublished 03/28/2022Updated 10/24/2026

CVE-2017-0059: Microsoft Internet Explorer Information Disclosure Vulnerability

Affects Microsoft Internet ExplorerSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 03/28/2022
KEV deadline: 04/18/2022
EPSS: 62.0% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2017-0059 (opens in a new tab)

Description

CVE-2017-0059 is an information disclosure vulnerability in Microsoft Internet Explorer that allows remote attackers to obtain sensitive information from process memory by tricking users into visiting a crafted website. This vulnerability has been exploited in the wild and is considered high severity.

Summary

Microsoft Internet Explorer contains an information disclosure vulnerability (CVE-2017-0059) that enables remote attackers to extract sensitive information from process memory via a specially crafted website. This vulnerability is classified under CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) and has been observed in active exploitation campaigns.

Impact

Successful exploitation of this vulnerability can lead to unauthorized disclosure of sensitive information from the affected Internet Explorer process memory. This can compromise user data confidentiality and potentially aid further attacks.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Microsoft advisories for updates and consider applying any recommended security updates or mitigations once available.

Weaknesses

CWE-200Information Exposure (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 11:12:00 UTC

Weaknesses

References

Related threats