{"id":"CVE-2019-0752","aliases":["EUVD-2019-1511","GHSA-x6vm-vfwq-m3w7"],"status":"published","title":"A remote code execution vulnerability exists in the way that the scripting engine handles objects...","description":"A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.81679,"percentile":0.99645,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-843"],"published":"2019-04-09T20:15:16Z","modified":"2026-08-12T05:17:19Z","kev":{"date_added":"2022-02-15","due_date":"2022-08-15","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Known"},"exploitation":[{"source":"euvd","since":"2022-02-15"},{"source":"kev","since":"2022-02-15"}],"exploits":[{"source":"exploitdb","id":"EDB-46928","title":"Microsoft Internet Explorer Windows 10 1809 17763.316 - Scripting Engine Memory Corruption","type":"remote","platform":"windows","date":"2019-05-24","url":"https://www.exploit-db.com/exploits/46928"},{"source":"pocgithub","id":"edxsh/CVE-2019-0752","title":"edxsh/CVE-2019-0752","date":"2020-12-18","url":"https://github.com/edxsh/CVE-2019-0752"}],"products":[{"vendor":"microsoft","product":"internet explorer"},{"vendor":"microsoft","product":"internet explorer 10"},{"vendor":"microsoft","product":"internet explorer 11"},{"vendor":"microsoft","product":"internet_explorer"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0752","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-19-359/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/153078/Microsoft-Internet-Explorer-Windows-10-1809-17763.316-Memory-Corruption.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0752","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-0752"},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-19-359"},{"url":"https://github.com/advisories/GHSA-x6vm-vfwq-m3w7"}],"sources":{"cve":[{"id":"CVE-2019-0752","description":"A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862.","status":"published","published":"2019-04-09T20:15:16Z","modified":"2026-08-12T03:55:55.812Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-843"],"updated_at":"2026-11-02T14:32:24.110857Z"}],"euvd":[{"id":"EUVD-2019-1511","description":"A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862.","status":"published","published":"2019-04-09T20:15:16Z","modified":"2026-08-12T03:55:55Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2022-02-15","updated_at":"2026-11-02T18:01:59.11112Z"}],"ghsa":[{"id":"GHSA-x6vm-vfwq-m3w7","title":"A remote code execution vulnerability exists in the way that the scripting engine handles objects...","description":"A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862.","status":"published","published":"2022-05-13T01:21:31Z","modified":"2025-10-22T00:31:38Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-843"],"updated_at":"2026-11-02T15:04:04.176931Z"}],"kev":[{"id":"CVE-2019-0752","title":"Microsoft Internet Explorer Type Confusion Vulnerability","description":"A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer","cwes":["CWE-843"],"kev":{"date_added":"2022-02-15","due_date":"2022-08-15","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Known"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2019-0752","description":"A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862.","status":"published","published":"2019-04-09T21:29:00.567Z","modified":"2026-08-12T05:17:19.467Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":7.6,"vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-843"],"updated_at":"2026-11-02T14:05:11.426883Z"}]}}