CVE-2020-0895

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'.

Score

CVSS 3.1 7.5 High

Status

Modified - secure@microsoft.com

Published

2020-04-15

Last modified

2024-08-04

Affected products

• Internet Explorer (Microsoft)
• Internet Explorer 11 (Microsoft)
• Internet Explorer 11 On Windows 10 Version 1903 For 32-bit Systems (Microsoft)
• Internet Explorer 11 On Windows 10 Version 1903 For Arm64-based Systems (Microsoft)
• Internet Explorer 11 On Windows 10 Version 1903 For X64-based Systems (Microsoft)
• Internet Explorer 11 On Windows 10 Version 1909 For 32-bit Systems (Microsoft)
• Internet Explorer 11 On Windows 10 Version 1909 For Arm64-based Systems (Microsoft)
• Internet Explorer 11 On Windows 10 Version 1909 For X64-based Systems (Microsoft)
• Internet Explorer 11 On Windows Server 2012 (Microsoft)
• Internet Explorer 9 (Microsoft)

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0895