CVE-2017-6517

CVE-2017-6517 is a critical DLL hijacking vulnerability affecting Microsoft Skype version 7.16.0.102. An unauthenticated, remote attacker can exploit this flaw by manipulating the loading of the api-ms-win-core-winrt-string-l1-1-0.dll file, leading to arbitrary code execution without user interaction. With a CVSS score of 9.8 (CRITICAL) and a FAUCET Risk Score of 97/100, this vulnerability poses a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion, indicating awareness and potential interest from researchers.