CVE-2019-0676

6.5

CVSS
Medium

PUBLISHED

An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited...

Exploited in the wild Remote Low complexity

Vendor: Microsoft
Product: Internet Explorer 11, Internet Explorer 10
Published: Mar 06, 2019
EPSS: —

Description

An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vulnerability'.

cisa microsoft

CVSS scores

CVSS v3.1 6.5 Medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CVSS v2.0 4.3

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitation status

Exploited in the wild

Recorded 2022-05-23 00:00:00 UTC · Source

SSVC decision points

Exploitation: active
Automatable: No
Technical impact: partial

References

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source	Added
CISA	May 23, 2022

Vulnerability detail