Be aware of a new bug in Internet Explorer 11, FOR X64 users

this new cve made by Tgroup, and fonded by SIMON ZUCKERBRAUN cve 2020-0674 with id EDB 48806.

This bug is able to exploit any data stored in Internet Explorer 11 , and extract saved password & logins .

We recommended that you use Firefox or google Chrome and turn off internet explorer 11 from control panel in windows features, because, previous versions of Internet Explorer have ended of support.

End of support means there are no more security updates, non-security updates, free or paid assisted support options, or online technical content updates.


Vulnerability: Use-After-Free when Array.sort() is called with a comparator function. The two
//                arguments are untracked by the garbage collector.
// Exploit Description: This exploit was written for 64-bit IE instances.
//                      However, Enhanced Protected Mode sandboxing could be enabled for IE 10
//                      and IE 11 because EPM on Windows 7 simply enables x64 and doesn't do
//                      much else.
//                      The exploit executes C:\Windows\System32\calc.exe but doesn't implement
//                      any form of process continuation after execution.