CVE-2017-0037

CVE-2017-0037 is a critical type confusion vulnerability in Microsoft Internet Explorer 10 and 11, and Microsoft Edge, specifically within the mshtml.dll component. This flaw allows remote attackers to execute arbitrary code through specially crafted CSS token sequences and JavaScript operating on TH elements. With a CVSS score of 8.1 (HIGH) and an EPSS score indicating high exploitability, this vulnerability poses a significant risk due to its network-based attack vector and potential for complete compromise of confidentiality, integrity, and availability. This CVE is actively exploited in the wild, as confirmed by its inclusion in the KEV catalog, and has publicly available exploit code on ExploitDB, garnering substantial community discussion and media attention.