CVE-2017-11907

CVE-2017-11907 is a critical memory corruption vulnerability in Internet Explorer, affecting numerous Windows versions from Windows 7 to Windows 10 and Server 2016. This flaw allows an attacker to execute arbitrary code with the same privileges as the current user, stemming from how Internet Explorer handles objects in memory. With a CVSS score of 7.5 (High) and a FAUCET Risk Score of 99/100, it presents a significant risk, requiring user interaction (UI:R) but with high confidentiality, integrity, and availability impacts. While not on the CISA KEV catalog, an ExploitDB entry (EDB-43370) for a jscript.dll heap overflow exists, and it has garnered notable community discussion and media coverage, indicating awareness and potential for exploitation.