{"id":"CVE-2019-0676","aliases":["EUVD-2019-1436","GHSA-49rq-p3m9-2cqc"],"status":"published","title":"An information disclosure vulnerability exists when Internet Explorer improperly handles objects...","description":"An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vulnerability'.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0811,"percentile":0.94864,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":false,"fix_available":false},"published":"2019-03-05T23:29:02.613Z","modified":"2026-06-17T02:08:40Z","kev":{"date_added":"2022-05-23","due_date":"2022-06-13","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2022-05-23"},{"source":"kev","since":"2022-05-23"}],"products":[{"vendor":"microsoft","product":"internet explorer"},{"vendor":"microsoft","product":"internet explorer 10"},{"vendor":"microsoft","product":"internet explorer 11"},{"vendor":"microsoft","product":"internet_explorer"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0676","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/106886","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0676","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-0676"},{"url":"https://github.com/advisories/GHSA-49rq-p3m9-2cqc"}],"sources":{"cve":[{"id":"CVE-2019-0676","description":"An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vulnerability'.","status":"published","published":"2019-03-06T00:00:00Z","modified":"2025-10-21T23:45:42.572Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"updated_at":"2026-11-02T14:32:24.110857Z"}],"euvd":[{"id":"EUVD-2019-1436","description":"An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vulnerability'.","status":"published","published":"2019-03-06T00:00:00Z","modified":"2025-10-21T23:45:42Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"exploited_since":"2022-05-23","updated_at":"2026-11-02T20:31:24.172282Z"}],"ghsa":[{"id":"GHSA-49rq-p3m9-2cqc","title":"An information disclosure vulnerability exists when Internet Explorer improperly handles objects...","description":"An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vulnerability'.","status":"published","published":"2022-05-13T01:21:29Z","modified":"2025-10-22T00:32:42Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:04:06.493434Z"}],"kev":[{"id":"CVE-2019-0676","title":"Microsoft Internet Explorer Information Disclosure Vulnerability","description":"An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could test for the presence of files on disk.","kev":{"date_added":"2022-05-23","due_date":"2022-06-13","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2019-0676","description":"An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vulnerability'.","status":"published","published":"2019-03-05T23:29:02.613Z","modified":"2026-06-17T02:08:40.863Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:05:07.268578Z"}]}}