CVE-2017-11890

CVE-2017-11890 is a critical scripting engine memory corruption vulnerability in Microsoft Internet Explorer, affecting numerous Windows operating systems from Windows 7 to Windows Server 2016. This flaw allows an unauthenticated attacker to execute arbitrary code in the context of the current user through specially crafted web content, posing a high risk to system integrity and confidentiality. The CVSS score of 7.5 (High) reflects its significant impact, though successful exploitation requires user interaction. While not listed on CISA's KEV catalog, an ExploitDB entry exists, and the vulnerability has garnered some community discussion and media coverage.