CVE-2020-1214

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1213, CVE-2020-1215, CVE-2020-1216, CVE-2020-1230, CVE-2020-1260.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
MicrosoftInternet Explorer 11 on Windows 10 Version 2004 for x64-based Systemsunspecified
MicrosoftInternet Explorer 9Windows Server 2008 for 32-bit Systems Service Pack 2; Windows Server 2008 for x64-based Systems Service Pack 2
MicrosoftInternet Explorer 11Windows 10 Version 1803 for 32-bit Systems; Windows 10 Version 1803 for x64-based Systems; Windows 10 Version 1803 for ARM64-based Systems; Windows 10 Version 1809 for 32-bit Systems; Windows 10 Version 1809 for x64-based Systems; Windows 10 Version 1809 for ARM64-based Systems; Windows Server 2019; Windows 10 Version 1709 for 32-bit Systems; Windows 10 Version 1709 for x64-based Systems; Windows 10 Version 1709 for ARM64-based Systems; Windows 10 for 32-bit Systems; Windows 10 for x64-based Systems; Windows 10 Version 1607 for 32-bit Systems; Windows 10 Version 1607 for x64-based Systems; Windows Server 2016; Windows 7 for 32-bit Systems Service Pack 1; Windows 7 for x64-based Systems Service Pack 1; Windows 8.1 for 32-bit systems; Windows 8.1 for x64-based systems; Windows RT 8.1
MicrosoftInternet Explorer 11 on Windows 10 Version 1909 for 32-bit Systemsunspecified
MicrosoftInternet Explorer 11 on Windows 10 Version 1909 for x64-based Systemsunspecified
MicrosoftInternet Explorer 11 on Windows 10 Version 1909 for ARM64-based Systemsunspecified
MicrosoftInternet Explorer 11 on Windows 10 Version 1903 for 32-bit Systemsunspecified
MicrosoftInternet Explorer 11 on Windows 10 Version 1903 for x64-based Systemsunspecified
MicrosoftInternet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systemsunspecified
MicrosoftInternet Explorer 11 on Windows Server 2012unspecified
MicrosoftInternet Explorer 11 on Windows 10 Version 2004 for 32-bit Systemsunspecified
MicrosoftInternet Explorer 11 on Windows 10 Version 2004 for ARM64-based Systemsunspecified

References

Timeline

Published
Jun 9, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-121408.8A buffer overflow in os/net/mac/ble/ble-l2cap.c in the BLE stack in Contiki-NG 4.4 and earlier allows an attacker to execute arbitrary code CVE-2020-121419.1An out-of-bounds read in the SNMP stack in Contiki-NG 4.4 and earlier allows an attacker to cause a denial of service and potentially discloCVE-2020-121424.91. IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentiaCVE-2020-121434.9The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to establish a TLCVE-2020-121444.9The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated. This makes it possible for someone toCVE-2020-121459.8Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+ uses HTTP headers to authenticate REST API calls from localhosCVE-2020-121468.8In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can access, modify, and delete restrCVE-2020-121478.8In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can make unauthorized MySQL queries CVE-2020-121486.8A command injection flaw identified in the nslookup API in Silver Peak Unity ECOSTM (ECOS) appliance software could allow an attacker to exeCVE-2020-121496.8The configuration backup/restore function in Silver Peak Unity ECOSTM (ECOS) appliance software was found to directly incorporate the user-cCVE-2020-12157.5A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code ExecutCVE-2020-12167.5A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execut
CVE-2020-1214: High severity, CVSS 7.5 | Vulnix