CVE-2017-11819

CVE-2017-11819 is a remote code execution vulnerability affecting Microsoft Windows 7 SP1, stemming from how Microsoft browsers handle objects in memory. This high-severity flaw, with a CVSS score of 7.5, allows an attacker to execute arbitrary code in the context of the current user, requiring user interaction and a high attack complexity. Despite its age, the vulnerability has a high FAUCET Risk Score of 91/100 and an EPSS score indicating a higher-than-average likelihood of exploitation. While not listed in CISA's KEV catalog and lacking public exploit intelligence in Metasploit, Nuclei, or ExploitDB, it did receive media coverage during its disclosure, suggesting some awareness within the security community.