Remote Code Execution Vulnerability in Internet Explorer by Microsoft
CVE-2020-0968
Key Information:
- Vendor
- Microsoft
- Status
- Vendor
- CVE Published:
- 15 April 2020
Badges
Summary
A remote code execution vulnerability exists in Internet Explorer due to improper handling of objects in memory by the scripting engine. This flaw may allow an attacker to execute arbitrary code on an affected system if a user visits a specially crafted website. Successful exploitation could give the attacker the same user privileges as the logged-in user, enabling them to install programs; view, change, or delete data; or create new accounts with full user rights. Users are advised to exercise caution when browsing online and to ensure their systems are updated with the latest security patches.
CISA Reported
CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed as being exploited but is not known by the CISA to be used in ransomware campaigns. This is subject to change at pace
The CISA's recommendation is: Apply updates per vendor instructions.
Affected Version(s)
Internet Explorer 11 Windows 10 Version 1803 for 32-bit Systems
Internet Explorer 11 Windows 10 Version 1803 for x64-based Systems
Internet Explorer 11 Windows 10 Version 1803 for ARM64-based Systems
References
EPSS Score
28% chance of being exploited in the next 30 days.
CVSS V3.1
Timeline
- 👾
Exploit known to exist
- 🦅
CISA Reported
Vulnerability published
Vulnerability Reserved