CVE-2018-0996

CVE-2018-0996 is a remote code execution vulnerability affecting Internet Explorer versions 9, 10, and 11, stemming from how its scripting engine handles memory objects. With a CVSS score of 7.5 (High), successful exploitation requires user interaction (UI:R) and has high impacts on confidentiality, integrity, and availability (C:H/I:H/A:H), though attack complexity is high (AC:H). While the vulnerability has a high FAUCET Risk Score of 93/100 and an EPSS score indicating higher exploitability than most CVEs, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and it is not listed in CISA's KEV catalog.