CVE-2019-0752
KEV
🔴 Łataj teraz
Wadliwe zarządzanie obiektami w pamięci w Internet Explorer umożliwia zdalne wykonanie kodu.
CVSS
7.5
EPSS
81.5%
Exploit
weaponized
Vendor
microsoft
Opis źródłowy (NVD)
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862.
exploit rce
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 7.5 |
| CISA KEV (aktywnie wykorzystywane) | Tak |
| FIRST EPSS (prawdopodobieństwo exploita) | 81.5% |
| Opublikowano (NVD) | 2019-04-09 21:29:00 UTC |
| Ostatnia modyfikacja (NVD) | 2026-08-12 05:17:19 UTC |
Referencje
- http://packetstormsecurity.com/files/153078/Microsoft-Internet-Explorer-Windows-10-1809-17763.316-Memory-Corruption.html (secure@microsoft.com) [Exploit, Third Party Advisory, VDB Entry]
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0752 (secure@microsoft.com) [Patch, Vendor Advisory]
- https://www.zerodayinitiative.com/advisories/ZDI-19-359/ (secure@microsoft.com) [Third Party Advisory, VDB Entry]
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0752 (134c704f-9b21-4f2e-91b3-4a467353bcc0) [US Government Resource]