Kaspersky Threats

KLA11749
Multiple vulnerabilities in Microsoft Browsers

Updated: 05/29/2020

Detect date ?	04/14/2020
Severity ?	Critical
Description	Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: A memory corruption vulnerability in Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code. A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code. A remote code execution vulnerability in VBScript can be exploited remotely via specially crafted website to execute arbitrary code. A memory corruption vulnerability in Scripting Engine can be exploited remotely to execute arbitrary code. A remote code execution vulnerability in Windows VBScript Engine can be exploited remotely via specially crafted website to execute arbitrary code.
Affected products	ChakraCore Microsoft Edge (EdgeHTML-based) Internet Explorer 9 Internet Explorer 11
Solution	Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories	CVE-2020-0968 CVE-2020-0969 CVE-2020-0966 CVE-2020-0970 CVE-2020-0967 CVE-2020-0895
Impacts ?	ACE [?]
Related products	Microsoft Internet Explorer Microsoft Edge ChakraCore
CVE-IDS ?	CVE-2020-09680.0Unknown CVE-2020-09670.0Unknown CVE-2020-08950.0Unknown CVE-2020-09660.0Unknown CVE-2020-09690.0Unknown CVE-2020-09700.0Unknown
KB list	4549949 4550927 4550929 4550964 4550917 4549951 4550961 4550922 4550930 4550905
Microsoft official advisories	Microsoft Security Update Guide