{"id":"CVE-2020-0968","kind":"vulnerability","aliases":["CVE-2020-0968"],"related":[],"title":"Microsoft Internet Explorer: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","description":"A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0970.","summary":"Microsoft Internet Explorer's scripting engine mishandles objects in memory, causing memory corruption. An attacker who gets a user to load a crafted page can run code on that user's machine.","severity":"high","cvss":7.6,"epss":0.30676,"exploited":true,"exploited_at":"2021-11-03T00:00:00+00:00","products":[{"name":"Microsoft Internet Explorer","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","internet-explorer","other","ransomware","windows"],"not_affected_if":["internet-explorer-removed","no-ie-installed"],"how_to_check":null,"fix":"Apply the Microsoft security update for Internet Explorer per vendor instructions, as CISA requires; the specific KB or patched version is not in the sources.","status":"open","published_at":"2020-04-15T15:15:18+00:00","first_seen_at":"2026-10-23T19:11:53+00:00","triaged_at":"2026-10-23T21:37:38+00:00","updated_at":"2026-10-23T21:57:34+00:00","category":"other","confidence":0.7,"triage":{"at":"2026-10-23T21:37:38Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Microsoft security update for Internet Explorer per vendor instructions, as CISA requires; the specific KB or patched version is not in the sources.","reach":"internet","impact":"high","summary":"Microsoft Internet Explorer's scripting engine mishandles objects in memory, causing memory corruption. An attacker who gets a user to load a crafted page can run code on that user's machine.","category":"other","who_cares":["windows","internet-explorer"],"confidence":0.7,"needs_auth":"no","worst_case":"Remote code execution on the user's machine, possibly used in ransomware campaigns.","analyst_note":"Confirm patched IE/Windows KB numbers and exact affected versions from the Microsoft advisory for CVE-2020-0968 and the KEV entry.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["internet-explorer-removed","no-ie-installed"],"user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000465,"input_tokens":2854,"output_tokens":359,"severity_before":"unknown"},"analyst_status":"queued","analyst_note":"Confirm patched IE/Windows KB numbers and exact affected versions from the Microsoft advisory for CVE-2020-0968 and the KEV entry.","search":"'-0968':14A,17A '-0970':94C '-2020':13A,16A,93C 'aka':80C 'attack':42B 'caus':38B 'code':54B,62C 'corrupt':10A,40B,84C 'craft':50B 'cve':12A,15A,87C,92C 'engin':8A,33B,72C,82C 'execut':63C 'exist':65C 'exploit':21B 'explor':3A,6A,24B,30B,79C 'explorer':20A 'get':44B 'handl':73C 'id':88C 'internet':2A,5A,19A,23B,29B,78C 'internet-explor':22B 'load':48B 'machin':59B 'memori':9A,37B,39B,76C,83C 'microsoft':1A,4A,18A,28B 'mishandl':34B 'object':35B,74C 'page':51B 'ransomwar':26B 'remot':61C 'run':53B 'script':7A,32B,71C,81C 'uniqu':90C 'user':46B,57B 'vulner':11A,64C,85C 'way':68C 'window':27B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2020-04-15T15:15:18+00:00","kev":{"dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Known"},"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2020-0968","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0968","severity":null,"published_at":"2021-11-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:53+00:00","fetched_at":"2026-10-25T13:39:33+00:00","note":null},{"source":"epss","external_id":"CVE-2020-0968","url":"https://api.first.org/data/v1/epss?cve=CVE-2020-0968","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2020-0968","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-0968","severity":null,"published_at":"2020-04-15T15:15:18+00:00","modified_at":"2026-06-17T02:47:06+00:00","first_seen_at":"2026-10-23T21:57:34+00:00","fetched_at":"2026-10-23T21:57:34+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}