Reference page — cumulative record through Wednesday, October 7, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2017-0059

CVE-2017-0059MEDIUM

Microsoft Internet Explorer

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   R  U  L  N  N    4.3   .6197   99.2   YES

AFFECTED
  Product            Versions                          Fixed
  Internet Explorer  Internet Explorer 9 through 11 –  —

TIMELINE
  Sep 9   Reserved by microsoft
  Mar 17  Published (CNA: microsoft)
  Mar 28  Added to CISA KEV, remediation due 2022-04-18

CNA: microsoft · CVSS v3.1 · 7 references · KEV due April 18, 2022

Description

Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0008 and CVE-2017-0009.

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
September 9, 2016	Reserved	Reserved by microsoft
March 17, 2017	Published	Published (CNA: microsoft)
March 28, 2022	KEV ADDED	Added to CISA KEV, remediation due 2022-04-18

Affected

Affected products and packages — 1 row
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
Microsoft Corporation	Internet Explorer	—	Internet Explorer 9 through 11	—

References (7)

http://www.securityfocus.com/bid/96645 [vdb-entry, x_refsource_BID]
http://www.securitytracker.com/id/1038008 [vdb-entry, x_refsource_SECTRACK]
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0059 [x_refsource_CONFIRM]
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0059 [government-resource]
https://www.exploit-db.com/exploits/41661/ [exploit, x_refsource_EXPLOIT-DB]
https://www.exploit-db.com/exploits/42354/ [exploit, x_refsource_EXPLOIT-DB]
https://www.exploit-db.com/exploits/43125/ [exploit, x_refsource_EXPLOIT-DB]

Authoritative record: CVE-2017-0059 at cve.org

Vendors: microsoft

About this page