CVE-2017-0037

A type confusion vulnerability in Microsoft Edge and Internet Explorer's mshtml.dll allowed remote code execution.

This unpatched vulnerability in the mshtml.dll component of Microsoft Edge and Internet Explorer enabled remote code execution, posing a severe risk to systems relying on these browsers. DIB organizations must ensure these browsers are patched and consider restricting their use to mitigate exploitation. The vulnerability was actively exploited in the wild, highlighting the critical need for timely patch management.

Shame score — A known, actively exploited vulnerability in widely used browsers that allowed remote code execution, indicating a failure to patch a critical flaw before it was weaponized.