CVE-2017-11810

This flaw is like a mistake in how Internet Explorer handles “temporary data” while running webpage scripts. If a user interacts with a specially prepared web page, an attacker can trick the browser into running code on your computer as the currently logged-in user—similar to a booby-trapped link that can turn into full control of the machine session.

This matters if your business still runs Internet Explorer on the affected Windows versions (including Windows 7 SP1 and certain Windows Server releases, plus Windows 8.1/RT 8.1, Windows 10 releases, and Windows Server 2016). It’s a risk when an attacker can reach users through the network with a crafted webpage and users interact with it in Internet Explorer. There’s no need for the attacker to have an account in advance, but the user interaction requirement makes “just being online” less sufficient than “clicking/interacting with the page.”

This is marked AMBER because a public exploit exists, and attackers don’t need to authenticate before attempting it—they only need a user to interact with a crafted page. With exploitation potential for browser session compromise, you should treat patching as a priority rather than a routine update.