CVE-2019-1367

KEV · Ransomware

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Vendor / Project: Microsoft
Product: Internet Explorer
Date added: Nov 3, 2021
Due date: May 3, 2022
Known ransomware use: Known
CWEs: CWE-787

Description

Microsoft Internet Explorer contains a memory corruption vulnerability in how the scripting engine handles objects in memory. Successful exploitation allows for remote code execution in the context of the current user.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-1367