VULNERABILITY INTELLIGENCE
CVE-2020-0674
CVSS score7.5 HIGH
EPSS probability86.86%
CISA KEVKnown exploited vulnerability
Published2020-02-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Known Exploited Vulnerability
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
Vendor / product: Microsoft / Internet Explorer
Description
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712, CVE-2020-0713, CVE-2020-0767.
Weakness classification
- CWE-416: Use After Free
Primary references
- secure@microsoft.com — Exploit, Third Party Advisory, VDB Entry
- secure@microsoft.com — Exploit, Third Party Advisory, VDB Entry
- secure@microsoft.com — Exploit, Third Party Advisory, VDB Entry
- secure@microsoft.com — Exploit, Third Party Advisory
- secure@microsoft.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource