CVE-2014-6363

CVE-2014-6363 is a critical memory corruption vulnerability in vbscript.dll, affecting Microsoft VBScript versions 5.6 through 5.8, and by extension, Internet Explorer 6 through 11. An attacker could exploit this by enticing a user to a crafted website, leading to arbitrary code execution or a denial of service. The vulnerability has a CVSS score of 9.3, indicating a network-exploitable, low-complexity attack with complete impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an ExploitDB entry exists for a related use-after-free vulnerability, and despite its high FAUCET Risk Score, there is no evidence of active exploitation or significant community discussion.