Impact

Successful exploitation allows for remote code execution with the privileges of the logged-in user. The vulnerability is explicitly noted as enabling the execution of arbitrary payloads, such as calc.exe, in proof-of-concept demonstrations.

Recommendation

• Identify systems running Internet Explorer 11 and assess the necessity of its continued use.
• Prioritize patching for the listed Windows versions as the public availability of exploit code increases the likelihood of exploitation.
• Disable or restrict access to jscript.dll if business requirements permit, as it is a frequent target for memory corruption attacks.
• Monitor for processes spawned by 'iexplore.exe' or the legacy JScript engine that deviate from standard browser operations.