CVE-2011-0031

no score yetEPSS 17%

The (1) JScript 5.8 and (2) VBScript 5.8 scripting engines in Microsoft Windows Server 2008 R2 and Windows 7 do not properly load decoded scripts obtained from web pages, which allows remote attackers to trigger memory corruption and consequently obtain sensitive information via a crafted web site, aka "Scripting Engines Information Disclosure Vulnerability."

EPSS: 17% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2011-02-09
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_7
microsoft:windows_server_2008

References

http://osvdb.org/70827
http://secunia.com/advisories/43249
http://www.securityfocus.com/bid/46139
http://www.securitytracker.com/id?1025044
http://www.vupen.com/english/advisories/2011/0322

Check your stack JSON