CVE-2017-0137

CVE-2017-0137 is a remote code execution vulnerability affecting Microsoft Edge, Windows 10, and Windows Server 2016. It stems from how Microsoft scripting engines handle objects in memory, potentially leading to memory corruption. With a CVSS score of 7.5 (High), an attacker could exploit this vulnerability remotely with high attack complexity, gaining the same user rights as the current user, including administrative control. While the EPSS score indicates a higher than average exploitability probability, there is no evidence of active exploitation, public exploit code, or significant community discussion.