Remote Code Execution Vulnerability in Microsoft Scripting Engines

CVE-2017-0035

What is CVE-2017-0035?

A remote code execution vulnerability exists due to improper memory handling in Microsoft scripting engines used in Microsoft web browsers. An attacker could exploit this vulnerability to execute arbitrary code with the same user privileges as the current user, potentially gaining control over the system if administrative rights are held. Successful exploitation might allow the attacker to install malicious software, manipulate or delete sensitive data, or create new user accounts with elevated permissions, thereby compromising the security and integrity of the affected systems.

References