CVE-2020-0674

KEV

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Vendor / Project: Microsoft
Product: Internet Explorer
Date added: Nov 3, 2021
Due date: May 3, 2022
Known ransomware use: Unknown
CWEs: CWE-416

Description

Microsoft Internet Explorer contains a memory corruption vulnerability due to the way the Scripting Engine handles objects in memory. Successful exploitation could allow remote code execution in the context of the current user.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-0674