Researchers have identified a serious security vulnerability in Microsoft’s infamous web browser Internet Explorer 11.
Discovered by security firm Kaspersky, the bug could be exploited by hackers to perform remote code execution on a target device and seize administrative privileges.
The vulnerability is also a zero-day – meaning hackers were able to exploit it before Microsoft could administer a fix – and was handed a critical severity rating of 7.5/10, as per the Common Vulnerability Scoring System (CVSS).
Internet Explorer vulnerability
According to Microsoft’s report, the bug was found in the browser’s scripting engine and is linked to the way objects are handled in memory.
“The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user,” explained the firm.
This could be especially problematic if an attacker were to target a device administrator, allowing them to install software, edit or delete data and create new accounts with full access privileges.
In late spring, the exploit was used in the wild to assault a company in South Korea, but the attack was mitigated by Kaspersky. It is unclear whether the zero-day has been abused in any other attacks.
“When in the wild attacks with zero-day vulnerabilities happen, it is always big news for the cybersecurity community. Successfully detection of such a vulnerability immediately pressures vendors to issue a patch and forces users to install all necessary updates,” explained Boris Larin, Security Expert at Kaspersky.
“This case includes an exploit with remote code execution capabilities, which is more dangerous. Coupled with the ability to affect the latest Windows 10 builds, the discovered attack is truly a rare thing nowadays.”
Microsoft delivered a fix for the Internet Explorer bug this week, as part of August 2020 Patch Tuesday. To shield against attack, users are advised to update to the latest version immediately.
