CVE-2017-0149

CVE-2017-0149 is a critical memory corruption vulnerability in Microsoft Internet Explorer versions 9 through 11, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted website. It carries a high CVSS score of 8.8, indicating a network-based attack with low complexity and high impact on confidentiality, integrity, and availability. This vulnerability has been actively exploited in the wild, as confirmed by its presence in CISA's KEV catalog, despite a lack of public exploit intelligence in Metasploit, Nuclei, or ExploitDB. While there's limited community discussion, it garnered significant media attention, suggesting its importance to security professionals.