CVE-2017-11870

CVE-2017-11870 is a critical memory corruption vulnerability in ChakraCore and Microsoft Edge, affecting Windows 10 versions 1703 and 1709, and Windows Server version 1709. An attacker can exploit this flaw to execute arbitrary code with the same privileges as the current user. The vulnerability has a CVSS score of 7.5 (HIGH), indicating a network-based attack with high impact on confidentiality, integrity, and availability, though it requires user interaction and has high attack complexity. While there is no evidence of active exploitation in the wild, a public exploit (EDB-43182) exists, and the vulnerability has garnered significant community attention and media coverage.