7.5
High
Exploited
· ransomware
CVE-2019-0752 Microsoft Internet Explorer Type Confusion Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Known to be used
Weakness
CWE-843
Description
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Internet Explorer 11 | Versions not published | |
| Internet Explorer 10 | Versions not published |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
- www.zerodayinitiative.com www.zerodayinitiative.com
- packetstormsecurity.com packetstormsecurity.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified
Other CVEs of Internet Explorer 11
The 158 CVEs of Internet Explorer 11 →
CVE-2021-26419
Scripting Engine Memory Corruption Vulnerability
7.5
High
CVE-2021-27085
Microsoft Internet Explorer Remote Code Execution Vulnerability
8.8
High
CVE-2021-26411
Microsoft Internet Explorer Memory Corruption Vulnerability
8.8
High
CVE-2020-17058
Microsoft Browser Memory Corruption Vulnerability
7.5
High