Researchers reveal 2 Windows zero-days from failed attack

The first zero-day (CVE-2020-1380), arguably the more dangerous of the two, could allow threat actors to execute arbitrary code remotely in Internet Explorer browsers.