Evil-DB LogoEvil-DB
← All CVEs

CVE-2020-0968

high · 7.5Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply updates per vendor instructions.

Added 2021-11-03Remediation due 2022-05-03

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0970.

7.5
CVSS
30.7%
EPSS (exploit prob.)
98th
EPSS percentile
2020-04-15
Published

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-787

Affected products

VendorProductAffected versions
microsoftinternet_explorer11
microsoftwindows_10_1507all versions
microsoftwindows_10_1507all versions
microsoftwindows_10_1607all versions
microsoftwindows_10_1607all versions
microsoftwindows_10_1709all versions
microsoftwindows_10_1709all versions
microsoftwindows_10_1709all versions
microsoftwindows_10_1803all versions
microsoftwindows_10_1803all versions
microsoftwindows_10_1803all versions
microsoftwindows_10_1809all versions
microsoftwindows_10_1809all versions
microsoftwindows_10_1809all versions
microsoftwindows_10_1903all versions
microsoftwindows_10_1903all versions
microsoftwindows_10_1903all versions
microsoftwindows_10_1909all versions
microsoftwindows_10_1909all versions
microsoftwindows_10_1909all versions
microsoftwindows_7all versions
microsoftwindows_8.1all versions
microsoftwindows_rt_8.1all versions
microsoftwindows_server_2008all versions
microsoftwindows_server_2008r2
microsoftwindows_server_2012all versions
microsoftwindows_server_2012r2
microsoftwindows_server_2016all versions
microsoftwindows_server_2019all versions
microsoftinternet_explorer9
microsoftwindows_server_2008all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2020-0968