CVE-2018-0772

CVE-2018-0772 is a critical scripting engine memory corruption vulnerability affecting Microsoft Internet Explorer and Edge across various Windows versions. This flaw allows an unauthenticated attacker to execute arbitrary code in the context of the current user if they are tricked into visiting a malicious website. With a CVSS score of 7.5 (High), exploitation requires user interaction and has high impacts on confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, its EPSS score indicates a higher than average probability of exploitation, and it garnered significant media coverage upon disclosure. There are no public exploits available in Metasploit, Nuclei, or ExploitDB, and it is currently marked as inactive on the Hot List.