Microsoft says customers can now disable JScript (JScript.dll) execution in Internet Explorer 11 after installing the Windows October 2020 monthly security updates. JScript is a legacy Microsoft implementation of the ECMAScript language specification in the form of an Active Scripting engine. Two actively exploited zero-day vulnerabilities were found in the JScript scripting engine and patched by Microsoft since September 2019. Attackers could also exploit the zero-days using a maliciously crafted website that will remotely execute commands on the visitor’s computer without their knowledge or permission.
Source: https://www.bleepingcomputer.com/news/security/microsoft-now-lets-you-disable-insecure-jscript-in-internet-explorer/

