CVE-2017-8696

CVE-2017-8696 is a remote code execution vulnerability in Windows Uniscribe, affecting various Microsoft products including Windows 7, Windows Server 2008, Office suites, Lync, and Skype for Business. This high-severity vulnerability (CVSS 7.5) can be exploited by an attacker through a specially crafted website, document, or email attachment, requiring user interaction but leading to complete compromise of confidentiality, integrity, and availability. While no public exploit code is readily available (Metasploit, Nuclei, ExploitDB), it has garnered some community discussion and media coverage, indicating awareness, though it is not listed in CISA's KEV catalog as actively exploited.