CVE-2019-0768

medium · 4.3

A security feature bypass vulnerability exists when Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions, and to allow requests that should otherwise be ignored, aka 'Internet Explorer Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0761.

4.3

CVSS

48.5%

EPSS (exploit prob.)

99th

EPSS percentile

2019-04-09

Published

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Weaknesses

CWE-20

Affected products

Vendor	Product	Affected versions
microsoft	internet_explorer	11
microsoft	windows_10	1709
microsoft	windows_10	1803
microsoft	windows_10	1809
microsoft	windows_server_2019	all versions

Check a specific version with /api/v1/cve/match.

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0768
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0768

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2019-0768