CVE-2020-0674
Microsoft Internet Explorer 10, Microsoft Internet Explorer 11, Microsoft Internet Explorer 11 on Windows 10 Version 1909 for 32-bit Systems
Published 11 Feb 2020 · updated 17 Jun 2026 · Analyzed
7.5 High · CVSS 3.1, NVD
Exploited in the wild
CISA added this to its Known Exploited Vulnerabilities catalog on 3 Nov 2021, with a remediation deadline of 3 May 2022 for US federal agencies.
Required action: Apply updates per vendor instructions.
Description
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712, CVE-2020-0713, CVE-2020-0767.
References
- packetstormsecurity.com/files/159137/Microsoft-Internet-Explorer-11-Use-After-Free.html · Exploit, Third Party Advisory, VDB Entry
- packetstormsecurity.com/files/161309/Microsoft-Internet-Explorer-11-Use-After-Free.html · Exploit, Third Party Advisory, VDB Entry
- packetstormsecurity.com/files/162565/Microsoft-Internet-Explorer-8-11-Use-After-Free.html · Exploit, Third Party Advisory, VDB Entry
- github.com/maxpl0it/CVE-2020-0674-Exploit · Exploit, Third Party Advisory
- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0674 · Patch, Vendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-0674 · US Government Resource