CVE-2017-11801

CVE-2017-11801 is a scripting engine information disclosure vulnerability in Microsoft ChakraCore that allows an attacker to execute arbitrary code in the context of the current user. It carries a high CVSS score of 7.5, indicating a significant risk due to its network-based attack vector, high impact on confidentiality, integrity, and availability, despite requiring user interaction and having high attack complexity. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, suggesting awareness within the security community. This CVE was addressed as part of Microsoft's October Patch Tuesday.