CVE-2017-11819: Microsoft Windows 7

High severity, CVSS 7.5. EPSS: 14.2% chance of exploitation in the next 30 days.

Microsoft Windows 7 SP1 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft browsers handle objects in memory, aka "Windows Shell Remote Code Execution Vulnerability".

Affected products

• Microsoft Windows 7: any version

Published 2017-10-13. Last modified 2026-06-17.