CVE-2017-8635

CVE-2017-8635 is a scripting engine memory corruption vulnerability affecting Microsoft browsers across various Windows operating systems, including Windows 7, 8.1, 10, and Server versions. This flaw allows an unauthenticated attacker to execute arbitrary code in the context of the current user through specially crafted web content. With a CVSS score of 7.5 (High), exploitation requires user interaction (e.g., visiting a malicious website) and has a high impact on confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, there is a publicly available denial-of-service exploit (EDB-42471) for Microsoft Edge Chakra, and the vulnerability has garnered significant community discussion and media coverage.