Remote Code Execution Vulnerability in Microsoft VBScript Engine
CVE-2020-1403
7.5HIGH
Key Information:
Summary
A vulnerability exists in how the VBScript engine manages objects in memory. An attacker can exploit this flaw to execute arbitrary code on the victim's system. This could lead to varying levels of impact depending on the malicious actions taken by the attacker, effectively compromising the security and integrity of the system. Users are advised to implement security updates and mitigations to protect against potential exploits.
Affected Version(s)
Internet Explorer 11 Windows 10 Version 1803 for 32-bit Systems
Internet Explorer 11 Windows 10 Version 1803 for x64-based Systems
Internet Explorer 11 Windows 10 Version 1803 for ARM64-based Systems
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved