CVE-2017-0071

CVE-2017-0071 is a remote code execution vulnerability in Microsoft scripting engines affecting Microsoft Edge, Windows 10, and Windows Server 2016. It allows an attacker to execute arbitrary code with the same user rights as the current user by corrupting memory when handling objects. With a CVSS score of 7.5 (HIGH), this vulnerability has a network attack vector and high impact on confidentiality, integrity, and availability, but requires user interaction and has high attack complexity. There is no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.