CVE-2017-8639

CVE-2017-8639 is a critical scripting engine memory corruption vulnerability affecting Microsoft Edge on Windows 10 and Windows Server 2016. This flaw allows an unauthenticated attacker to execute arbitrary code in the context of the current user by crafting malicious web content that exploits how the browser handles objects in memory. With a CVSS score of 7.5 (High), successful exploitation requires user interaction (e.g., visiting a malicious website) but can lead to high confidentiality, integrity, and availability impacts. While the vulnerability is not listed in CISA's KEV catalog and no public exploit code is readily available (Metasploit, Nuclei, ExploitDB), it garnered some community discussion and media coverage at the time of its disclosure.