CVE-2019-0752highunder attackransomwareCWE-843

CVE-2019-0752: high-severity vulnerability in Microsoft Internet Explorer 10

Published · Updated

Follow this CVE+ Monitor Internet Explorer

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

93Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.

ssvc Actcvss 7.5epss 82%
from disclosure to weapon45 days
Published on NVDApr 9
1st PoC+45d
CISA KEV+1043d
Action required by CISAfederal deadline: 2022-08-15

Apply updates per vendor instructions.

In short

A vulnerability in Internet Explorer's scripting engine allows attackers to execute malicious code by corrupting memory when the browser processes specially crafted web content. This can give attackers complete control over your computer.

Technical detail

A memory corruption vulnerability in Internet Explorer's scripting engine (CWE-843) allows remote code execution when processing malicious scripts. The attack vector is network-based, requiring user interaction to visit a compromised or attacker-controlled webpage; successful exploitation results in arbitrary code execution with the privileges of the user running the browser.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Microsoft · Internet Explorer 10Microsoft · Internet Explorer 11
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Microsoft Internet Explorer 10

In the same product, most dangerous first.

CVE-2020-0674HIGHCVE-2020-0674EPSS 86.9%KEVCVE-2021-26411HIGHInternet Explorer Memory Corruption VulnerabilityEPSS 81.7%KEVCVE-2019-1429HIGHCVE-2019-1429EPSS 77.3%KEVCVE-2018-8373HIGHCVE-2018-8373EPSS 61.8%KEVCVE-2019-0541HIGHCVE-2019-0541EPSS 53.2%KEVCVE-2019-1367HIGHCVE-2019-1367EPSS 52.4%KEV