CVE-2017-8594

This flaw is in Internet Explorer’s handling of data in memory. Think of it like a web browser that occasionally mis-manages a “working memory” space—an attacker can use a specially crafted page/file to make it run their instructions as whoever is using the computer. The result can be malware running inside the user’s own context, which makes it easier to steal data and cause disruption.

This matters if your business runs Internet Explorer on Windows 8.1/Windows RT 8.1 or Windows Server 2012 R2. It’s not about your whole server automatically being compromised—an attacker generally needs to get a user to open attacker-controlled content in Internet Explorer. The exposure is greatest when Internet Explorer is reachable in normal daily use and users can open links or files from untrusted sources.

Mark this as urgent enough to patch promptly because a public exploit is available, meaning attackers can realistically weaponize it. There’s no CISA KEV entry confirming large-scale exploitation, but the combination of an available exploit and “high” severity means you should act now rather than waiting.