VULNERABILITY INTELLIGENCE

CVE-2019-1367

CVSS score7.5 HIGH

EPSS probability52.45%

CISA KEVKnown exploited vulnerability

Published2019-09-23

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Vendor / product: Microsoft / Internet Explorer

Description

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1221.

Weakness classification

CWE-787: Out-of-bounds Write

Primary references

secure@microsoft.com — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource