CVE-2019-0752
high · 7.5Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
Apply updates per vendor instructions.
Added 2022-02-15Remediation due 2022-08-15
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862.
7.5
CVSS
81.6%
EPSS (exploit prob.)
100th
EPSS percentile
2019-04-09
Published
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-843
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | internet_explorer | 11 |
| microsoft | windows_10_1507 | all versions |
| microsoft | windows_10_1507 | all versions |
| microsoft | windows_10_1607 | all versions |
| microsoft | windows_10_1607 | all versions |
| microsoft | windows_10_1703 | all versions |
| microsoft | windows_10_1703 | all versions |
| microsoft | windows_10_1709 | all versions |
| microsoft | windows_10_1709 | all versions |
| microsoft | windows_10_1709 | all versions |
| microsoft | windows_10_1803 | all versions |
| microsoft | windows_10_1803 | all versions |
| microsoft | windows_10_1803 | all versions |
| microsoft | windows_10_1809 | all versions |
| microsoft | windows_10_1809 | all versions |
| microsoft | windows_10_1809 | all versions |
| microsoft | windows_7 | all versions |
| microsoft | windows_8.1 | all versions |
| microsoft | windows_rt_8.1 | all versions |
| microsoft | windows_server_2008 | r2 |
| microsoft | windows_server_2012 | r2 |
| microsoft | windows_server_2016 | all versions |
| microsoft | windows_server_2019 | all versions |
| microsoft | internet_explorer | 10 |
| microsoft | windows_server_2012 | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://packetstormsecurity.com/files/153078/Microsoft-Internet-Explorer-Windows-10-1809-17763.316-Memory-Corruption.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0752
- https://www.zerodayinitiative.com/advisories/ZDI-19-359/
- http://packetstormsecurity.com/files/153078/Microsoft-Internet-Explorer-Windows-10-1809-17763.316-Memory-Corruption.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0752
- https://www.zerodayinitiative.com/advisories/ZDI-19-359/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0752
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2019-0752