Yesterday saw Microsoft release build 16237 to Windows 10 Insiders. This build contained a whole range of improvements, but shortly after the release, Microsoft posted on its Windows Blog that there’s another change available.
Internet Explorer 11, which still sits quietly in Windows 10, although mostly superseded by Microsoft Edge, now has the option to disable VBScript from executing. VBScript has been known to be a hit-point in Internet Explorer, making it easy for exploits to attack the system.
As of build 16237, VBScript is disabled by default. It will still be possible to enable or disable VBScript execution per site security zone, via the Registry or via Group Policy.
Those outside of the Windows Insider program, this change will be making its way in the future to customers on previous versions of Windows via a culmulative update, as part of a security patch.
