CVE-2017-0059

A remote information disclosure vulnerability in Internet Explorer allowed attackers to read sensitive data from process memory via a crafted website.

This flaw exposed sensitive information stored in the memory of running processes, enabling attackers to steal credentials, keys, or other secrets without executing code. For DIB organizations, this means legacy browsers or unpatched systems could leak critical data to threat actors, violating CMMC/NIST 800-171 requirements for protecting unclassified information. Organizations must ensure all browsers are patched and consider phasing out unsupported products like Internet Explorer.

Shame score — A known, actively exploited vulnerability in a widely used product that allowed remote attackers to exfiltrate sensitive data without requiring code execution, representing a significant but not catastrophic exposure.