CVE-2020-0832

HIGH

Internet Explorer - Remote Code Execution via Scripting Engine Memory Corruption

Title source: llm
STIX 2.1

Description

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0833, CVE-2020-0848.

References (1)

Core 1
Core References

Scores

CVSS v3 7.5
EPSS 0.0325
EPSS Percentile 87.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (3)
microsoft/internet_explorer 11
microsoft/internet_explorer 9
nuget/Microsoft.ChakraCore 0 - 1.11.17NuGet
Published Mar 12, 2020
Tracked Since Feb 18, 2026