ZeroDay Findings
Sign inSign up

Findings

CVE-2020-0674

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Published Feb 11, 2020 · updated Jun 16, 2026 · microsoft internet explorer

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712, CVE-2020-0713, CVE-2020-0767.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 11, 2020 · Catalog

    Detected

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712, CVE-2020-0713, CVE-2020-0767.

  2. Nov 3, 2021 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. May 3, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712, CVE-2020-0713, CVE-2020-0767.

Required action

Apply updates per vendor instructions.

CISA due date May 3, 2022

Affected

  • cpe microsoft/internet explorer10
  • cpe microsoft/internet explorer11
  • cpe microsoft/internet explorer9
  • vendor Microsoft Internet Explorerversion unspecified

Sources

  • CISA KEVCVE-2020-0674

    Microsoft Internet Explorer contains a memory corruption vulnerability due to the way the Scripting Engine handles objects in memory. Successful exploitation could allow remote code execution in the context of the current user.

    cisa.gov
  • CVE.orgCVE-2020-0674

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2020-0674

    30-day exploitation probability 86.9%

    first.org
  • Exploit Database49062

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Exploit Database49863

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • NIST NVDCVE-2020-0674

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712, CVE-202

    nvd.nist.gov
  • Packet Storm Securityhttp://packetstormsecurity.com/files/159137/Microsoft-Internet-Explorer-11-Use-After-Free.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com
  • Packet Storm Securityhttp://packetstormsecurity.com/files/161309/Microsoft-Internet-Explorer-11-Use-After-Free.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com
  • Packet Storm Securityhttp://packetstormsecurity.com/files/162565/Microsoft-Internet-Explorer-8-11-Use-After-Free.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com

References