High (8.8) in microsoft internet explorer. EPSS 22% chance of exploitation in the next 30 days.
The Microsoft (1) JScript and (2) VBScript engines, as used in Internet Explorer 11, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."
Severity
CVSS 3.0
8.8 high
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
22% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-11-01)