CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-02-11
Microsoft Internet Explorer Scripting Engine Use-After-Free Remote Code Execution Vulnerability (CVE-2020-0674)
[Affected Scope] Internet Explorer 9, 10, and 11 running on various Windows operating system environments
[Impact] Remote attackers can execute arbitrary code with the privileges of the current user by enticing a victim to view a specially crafted website
[Mitigation] Apply the official Microsoft cumulative security updates immediately, or restrict access to the legacy scripting engine (jscript.dll) as a temporary workaround