Technical intelligence and weaponization dossier for CVE-2020-0674. Documented exploitation across 1 active malware families totaling 159 analyzed telemetry samples.
| Vulnerability ID | CVE-2020-0674 |
|---|---|
| Common Name / Bulletin | Microsoft Windows Scripting Engine Memory Corruption Vulnerability (ADV200001) |
| CWE Classification | CWE-416: Use After Free in jscript.dll |
| Affected Software & Versions | Microsoft Internet Explorer 9, 10, 11 on Windows 7, 8.1, 10 |
| Technical Root Cause | Use-after-free in jscript.dll handling objects in memory, exploited in the wild in targeted phishing campaigns. |
| Associated ATT&CK Techniques |
Empirical catalog telemetry verifies that the following 1 malware families weaponize this vulnerability for initial access, privilege escalation, or lateral movement:
| Malware Family | Category | Catalog Samples | Operational Profile |
|---|---|---|---|
| socelars | Infostealer | 159 | Trojan:Win32/Socelars is a targeted browser session hijacking and credential theft trojan that surfaced in 2019, specifically engineered to compromise corporate... |
Threat intelligence confirms the following adversaries weaponize CVE-2020-0674 in enterprise intrusions and campaign toolkits:
Threat hunting leads and behavioral telemetry patterns to identify weaponized exploitation of CVE-2020-0674 in enterprise networks:
Execution of jscript.dll with anomalous memory allocations inside iexplore.exe or office applications.SOC containment checklist and attack surface reduction measures to neutralize exploitation:
For end-to-end incident response procedures, consult our dedicated playbook: InfoStealer Protection & Remediation →