CVE-2020-0878: Microsoft Edge and Internet Explorer Memory Corruption Vulnerability

CISA Known Exploited Vulnerabilities

Name

Microsoft Edge and Internet Explorer Memory Corruption Vulnerability

Vendor

Microsoft

Product

Edge and Internet Explorer

Added to the catalog

2021-11-03

Due date for US federal agencies

2022-05-03

Weaknesses

CWE-787

Catalog version

2026.10.30

Microsoft Edge and Internet Explorer contain a memory corruption vulnerability that allows attackers to execute code in the context of the current user.

Required action (CISA)

Apply updates per vendor instructions.

Ransomware use: CISA marks this vulnerability as known to be used in ransomware campaigns. CISA does not say which group used it.

Links in CISA's notes

• https://nvd.nist.gov/vuln/detail/CVE-2020-0878

Read on 2026-11-02T23:39:54.475Z under licence cisa-kev-cc0@b0067899 from https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json

NVD analysis

Status

Analyzed

Published

2020-09-11T17:15:14.370

Last modified

2026-06-17T02:46:53.100

Weaknesses

CWE-787

<p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.</p>
<p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p>

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0878 (Patch, Vendor Advisory)
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0878 (Patch, Vendor Advisory)
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-0878 (US Government Resource)

This product uses the NVD API but is not endorsed or certified by the NVD.

Read on 2026-11-02T23:41:51.476Z under licence nvd-api-terms-of-use@ff2a5288 from https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2020-0878

CVE record

Title (CNA)

Microsoft Browser Memory Corruption Vulnerability

Assigner

microsoft

State

PUBLISHED

Published

2020-09-11T17:08:26.000Z

Updated

2025-10-21T23:35:36.572Z

Problem types

Remote Code Execution

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0878

Read on 2026-11-03T01:02:55.625Z under licence cve-terms-of-use@81bfa2f3 from https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json

Defensive techniques (MITRE D3FEND)

D3FEND maps these defensive techniques to the weakness (CWE) that NVD lists for this CVE, through the digital artifacts the weakness affects. D3FEND does not say they stop this vulnerability.

MITRE D3FEND™ knowledge graph. © 2025 The MITRE Corporation.
"The MITRE Corporation (MITRE) hereby grants you a non-exclusive, royalty-free license to use D3FEND for research, development, and commercial purposes. Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy." Terms: https://d3fend.mitre.org/tou/