CVE-2017-0283

CVE-2017-0283 is a remote code execution vulnerability in Microsoft's Uniscribe component, affecting various versions of Windows, Microsoft Office, Lync, Skype for Business, and Silverlight. This flaw stems from how Uniscribe handles objects in memory. It carries a high CVSS score of 8.8, indicating a critical risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an ExploitDB entry exists for a heap memory corruption vulnerability related to Uniscribe font processing, and it has received some community discussion and media coverage, including reports of it being used in live attacks.