CVE-2018-0997

CVE-2018-0997 is a remote code execution vulnerability in Internet Explorer 11, affecting various Windows operating systems including Windows 10, 7, 8.1, and several Windows Server versions. This memory corruption flaw allows an attacker to execute arbitrary code if a user visits a specially crafted website. With a CVSS score of 7.5 (HIGH), exploitation requires high attack complexity and user interaction, but can lead to complete compromise of confidentiality, integrity, and availability. While not currently listed in CISA's KEV catalog and lacking public exploit code in Metasploit or ExploitDB, it has garnered some community discussion and media coverage, indicating awareness within the security community.