CVE-2020-1093: 
vulnerability analysis and mitigation

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, known as 'VBScript Remote Code Execution Vulnerability'. This vulnerability was assigned CVE-2020-1093 and is distinct from related vulnerabilities CVE-2020-1035, CVE-2020-1058, and CVE-2020-1060. The vulnerability affects various versions of Microsoft Windows and Internet Explorer (NVD, CVE).

The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H. Under CVSS v2.0, it received a base score of 7.6 (HIGH) with the vector (AV:N/AC:H/Au:N/C:C/I:C/A:C). The vulnerability is classified as CWE-787 (Out-of-bounds Write) (NVD).

If successfully exploited, this vulnerability could allow an attacker to execute arbitrary code remotely on affected systems. The vulnerability affects multiple versions of Windows 10 and Internet Explorer, potentially exposing a large number of systems to remote code execution attacks (NVD).

The vulnerability requires user interaction and has high attack complexity. An attacker would need to convince a user to visit a specially crafted website or open a malicious file to exploit this vulnerability (NVD).

Microsoft has released security updates to address this vulnerability. Users should apply the appropriate patches through Microsoft's security advisory (MSRC Advisory).