https://www.theregister.co.uk/2019/08/05/vbscript_disabled_by_default/

Microsoft is dealing with the seemingly never-ending dribble of security problems with VBScript by muffling its cries. In Internet Explorer 11, at least.

The browser gang had already deprecated the tech in Internet Explorer 11 unless you really, really wanted it but, as of July, upped the ante by disabling it by default for Untrusted Zones for Windows 10. By 13 August, Windows 7, 8 and 8.1 will follow suit, thanks to a cumulative update.