peter bassill · operator
$ cve CVE-2019-0752 JSON

CVE-2019-0752 KEV EXPLOIT

7.5
HIGH · CVSS 3.1 · EPSS 81.6% (pctl 100)

Patch first

On CISA KEV — known exploited in the wild, due 2022-08-15.

Description

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862.

Scoring

CVSS7.5 (HIGH, v3.1)
VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS81.55% — more likely to be exploited than 100% of all CVEs
WeaknessCWE-843
On CISA KEVyes — remediate by 2022-08-15
Public exploityes
Published2019-04-09
Last modified2026-08-12

CISA KEV

NameMicrosoft Internet Explorer Type Confusion Vulnerability
Added2022-02-15
Due2022-08-15
Vendor / productMicrosoft / Internet Explorer
Ransomware useknown

Affected (14)

VendorProduct
microsoftinternet explorer
microsoftwindows 10 1507
microsoftwindows 10 1607
microsoftwindows 10 1703
microsoftwindows 10 1709
microsoftwindows 10 1803
microsoftwindows 10 1809
microsoftwindows 7
microsoftwindows 8.1
microsoftwindows rt 8.1
microsoftwindows server 2008
microsoftwindows server 2012
microsoftwindows server 2016
microsoftwindows server 2019

Public exploits

SourceTitleDate
exploit-dbMicrosoft Internet Explorer Windows 10 1809 17763.316 - Scripting Engine Memory Corruption2019-05-24

References

→ the Explorer  ·  watch your stack  ·  NVD