CVE-2020-0968

HIGH KEV RANSOMWARE

Microsoft Internet Explorer - Out-of-Bounds Write

Title source: rule

Description

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0970.

Scores

CVSS v3 7.5
EPSS 0.4367
EPSS Percentile 97.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CISA KEV 2021-11-03
VulnCheck KEV 2020-10-02
InTheWild.io 2021-07-23
ENISA EUVD EUVD-2020-2436
Ransomware Use Confirmed
CWE
CWE-787
Status published
Products (2)
microsoft/internet_explorer 11
microsoft/internet_explorer 9
Published Apr 15, 2020
KEV Added Nov 03, 2021
Tracked Since Feb 18, 2026