coldbraid

CVE-2020-0674 Microsoft Internet Explorer

Microsoft Internet Explorer contains a memory corruption vulnerability due to the way the Scripting Engine handles objects in memory. Successful exploitation could allow remote code execution in the context of the current user.

CVSS
not scored

CWE-416

On CISA’s exploited list

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Added
2021-11-03
Federal patch deadline
2022-05-03
Ransomware use
not known

Actors known to use it (MITRE ATT&CK)