{"id":"CVE-2019-0761","aliases":["EUVD-2019-1520","GHSA-cw79-cv57-4v8x"],"status":"published","title":"A security feature bypass vulnerability exists when Internet Explorer fails to validate the...","description":"A security feature bypass vulnerability exists when Internet Explorer fails to validate the correct Security Zone of requests for specific URLs, aka 'Internet Explorer Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0768.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03854,"percentile":0.90228,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-863"],"published":"2019-04-09T01:49:10Z","modified":"2026-06-17T02:08:51Z","products":[{"vendor":"microsoft","product":"internet explorer 10"},{"vendor":"microsoft","product":"internet explorer 11"},{"vendor":"microsoft","product":"internet_explorer"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0761","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-0761"},{"url":"https://github.com/advisories/GHSA-cw79-cv57-4v8x"}],"sources":{"cve":[{"id":"CVE-2019-0761","description":"A security feature bypass vulnerability exists when Internet Explorer fails to validate the correct Security Zone of requests for specific URLs, aka 'Internet Explorer Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0768.","status":"published","published":"2019-04-09T01:49:10Z","modified":"2024-08-04T17:58:58.698Z","updated_at":"2026-11-02T14:32:24.473448Z"}],"euvd":[{"id":"EUVD-2019-1520","description":"A security feature bypass vulnerability exists when Internet Explorer fails to validate the correct Security Zone of requests for specific URLs, aka 'Internet Explorer Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0768.","status":"published","published":"2019-04-09T01:49:10Z","modified":"2024-08-04T17:58:58Z","updated_at":"2026-11-03T03:07:00.558698Z"}],"ghsa":[{"id":"GHSA-cw79-cv57-4v8x","title":"A security feature bypass vulnerability exists when Internet Explorer fails to validate the...","description":"A security feature bypass vulnerability exists when Internet Explorer fails to validate the correct Security Zone of requests for specific URLs, aka 'Internet Explorer Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0768.","status":"published","published":"2022-05-13T01:21:32Z","modified":"2023-02-01T05:06:40Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:50:24.014737Z"}],"nvd":[{"id":"CVE-2019-0761","description":"A security feature bypass vulnerability exists when Internet Explorer fails to validate the correct Security Zone of requests for specific URLs, aka 'Internet Explorer Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0768.","status":"published","published":"2019-04-09T02:29:00.71Z","modified":"2026-06-17T02:08:51.033Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:05:11.426883Z"}]}}