CVE-2017-8748

CVE-2017-8748 is a scripting engine memory corruption vulnerability affecting Microsoft Internet Explorer and Edge browsers across various Windows operating systems, including Windows 7, 8.1, 10, and Server versions. This high-severity vulnerability (CVSS 7.5) allows an unauthenticated attacker to execute arbitrary code in the context of the current user if they can trick the user into visiting a malicious website. While the attack complexity is high, successful exploitation could lead to complete compromise of the user's system. There is no evidence of active exploitation, publicly available exploit code, or inclusion in CISA's KEV catalog, though it garnered some community discussion and media coverage at the time of its disclosure.