CVE-2017-11910

CVE-2017-11910 is a critical memory corruption vulnerability affecting ChakraCore and various versions of Windows 10 and Windows Server 2016. This flaw allows an unauthenticated attacker to execute arbitrary code in the context of the current user by manipulating how the scripting engine handles objects in memory. With a CVSS score of 7.5 (High), successful exploitation requires user interaction (e.g., clicking a malicious link) but can lead to complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential for future exploitation.