CVE-2017-11889

CVE-2017-11889 is a critical memory corruption vulnerability affecting ChakraCore and Microsoft Edge on various Windows 10 and Server 2016 versions. This flaw allows an unauthenticated attacker to execute arbitrary code in the context of the current user by exploiting how the scripting engine handles objects in memory. With a CVSS score of 7.5 (High), exploitation requires user interaction (e.g., visiting a malicious website) but can lead to full compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation (KEV) or public exploit code (Metasploit, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential for future exploitation.