CVE-2020-0674: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

CISA Known Exploited Vulnerability (KEV)

Description

Microsoft Internet Explorer contains a memory corruption vulnerability due to the way the Scripting Engine handles objects in memory. Successful exploitation could allow remote code execution in the context of the current user.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-0674

Weakness behind it

CISA records this vulnerability as an instance of CWE-416. From there the chain continues into CAPEC attack patterns and ATT&CK techniques, all inside this corpus.

References

• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-0674
• KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog