CVE-2017-7764

CVE-2017-7764 is a domain name spoofing vulnerability affecting Firefox versions prior to 54, Firefox ESR prior to 52.2, and Thunderbird prior to 52.2. It arises from the browser's handling of "Canadian Syllabics" Unicode characters in the address bar, which could be mixed with other Unicode blocks instead of being displayed as Punycode, leading to character confusion. The vulnerability has a CVSS score of 5.3 (Medium), indicating a network-based attack with low complexity and a potential impact of low integrity. While the vulnerability has garnered some community discussion and media coverage, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB.