Remote Code Execution Vulnerability in Microsoft Internet Explorer (CVE‑2020‑1380) Listed in CISA KEV
What It Is — A memory‑corruption flaw in the Internet Explorer scripting engine that can be triggered remotely to execute arbitrary code in the context of the current user.
Exploitability — Actively exploited in the wild; CISA added the CVE to its Known Exploited Vulnerabilities (KEV) catalog. CVSS v3.1 base score 7.8 (High).
Affected Products — Microsoft Internet Explorer 11 and earlier versions on Windows 7, 8.1, 10, and Windows Server editions that still include the browser.
Why It Matters for Trust & Control Assurance
- Demonstrates the need for a formal patch‑management process that can be continuously monitored and reported as evidence of due diligence.
- Highlights the importance of runtime configuration controls (e.g., disabling legacy browsers) that can be mapped to control objectives across multiple frameworks.
- Provides a concrete data point for auditors: documented remediation of a CISA‑listed KEV shows a defensible audit trail and strengthens the organization’s trust posture.
Recommended Actions
- Verify the presence of Internet Explorer on all endpoints.
- Apply Microsoft’s security update (KB4577586) or later that resolves CVE‑2020‑1380.
- If IE is not required, disable or uninstall the browser to reduce attack surface.
- Capture remediation evidence (patch status, configuration change) in a centralized control‑evidence repository.
- Update your vulnerability‑management dashboard to flag any remaining KEV items.
Source: CISA KEV – CVE‑2020‑1380