CVE-2017-8750

CVE-2017-8750 is a memory corruption vulnerability affecting Microsoft Internet Explorer and Edge browsers across various Windows operating systems, including Windows 7, 8.1, 10, and Server editions. This flaw allows an unauthenticated attacker to execute arbitrary code in the context of the current user by tricking them into visiting a malicious website. The vulnerability carries a CVSS v3 score of 7.5 (HIGH), indicating a high potential for impact (confidentiality, integrity, and availability) with a network-based attack requiring high attack complexity and user interaction. Its FAUCET Risk Score of 90/100 further emphasizes its severity. While there are no public exploits available in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion and media coverage, including mentions in articles about top exploited vulnerabilities and APT activity. Despite this attention, it is not currently listed in CISA's KEV catalog as actively exploited.