CVE-2017-11810

CVE-2017-11810 is a critical memory corruption vulnerability in the Internet Explorer scripting engine affecting various Microsoft Windows versions, including Windows 7, 8.1, 10, and Server editions. This flaw allows an unauthenticated attacker to execute arbitrary code with the current user's privileges, typically through a specially crafted website. With a CVSS score of 7.5 (High) and a FAUCET Risk Score of 98/100, it requires user interaction (UI:R) but can lead to full compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an ExploitDB entry for a use-after-free vulnerability exists, and it has garnered some community discussion and media coverage, indicating its potential for exploitation.