CVE-2017-8602

CVE-2017-8602 is a spoofing vulnerability affecting Microsoft browsers (Edge and Internet Explorer) across various Windows operating systems, including Windows 7, 8.1, 10, and Server versions. This flaw stems from how these browsers parse HTTP content, potentially allowing an attacker to mislead users. Rated as MEDIUM severity with a CVSS score of 6.5, it requires user interaction (UI:R) but has a low attack complexity (AC:L) and can lead to high integrity impact (I:H), although confidentiality and availability are not directly affected. While there is no evidence of active exploitation (KEV: No) and no public exploit code (Metasploit, Nuclei, ExploitDB: None), the vulnerability has garnered significant community discussion and media coverage, indicating awareness within the security community.