CVE-2011-0663: Microsoft Jscript

High severity, CVSS 8.8. EPSS: 26.2% chance of exploitation in the next 30 days.

Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote attackers to execute arbitrary code via a crafted web page, aka "Scripting Memory Reallocation Vulnerability."

Affected products

• Microsoft Jscript: version 5.6 only; version 5.7 only; version 5.8 only
• Microsoft Vbscript: version 5.6 only; version 5.7 only; version 5.8 only

Published 2011-04-13. Last modified 2026-06-16.