CVE-2020-1035: 
vulnerability analysis and mitigation

A remote code execution vulnerability identified as CVE-2020-1035 exists in the VBScript engine's handling of objects in memory. The vulnerability was disclosed on May 21, 2020, and affects various Microsoft Windows systems and Internet Explorer. This vulnerability is distinct from similar issues tracked as CVE-2020-1058, CVE-2020-1060, and CVE-2020-1093 (NVD, CVE).

The vulnerability is classified as an Out-of-bounds Write (CWE-787) with a CVSS v3.1 base score of 7.5 (HIGH) and vector string CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H. The CVSS v2.0 base score is 7.6 with vector (AV:N/AC:H/Au:N/C:C/I:C/A:C). The vulnerability requires user interaction and involves complex attack vectors (NVD).

If successfully exploited, this vulnerability could allow an attacker to execute arbitrary code on the target system with the privileges of the current user. The vulnerability affects multiple versions of Windows and Internet Explorer, potentially exposing a large number of systems to compromise (NVD).

The vulnerability requires user interaction and has high attack complexity. An attacker would need to convince a user to interact with a specially crafted payload to trigger the vulnerability (NVD).

Microsoft has released security patches to address this vulnerability through their standard security update process. Users are advised to apply the security updates provided through the Microsoft Security Response Center (MSRC).