KEV · Actively exploited
CVE-2019-0752
CVE-2019-0752 is actively exploited (CISA KEV catalog) : high severity (CVSS 7.5), 0 tracked apps concerned, none still exposed on their current version.
- Severity (CVSS)
- 7.5
- Exploitation
- Confirmed
- Tracked apps
- 0
- Still exposed
- 0
NVD scale
CISA KEV · EPSS predicts 81.6 %
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862.
Attack vector : Network
No privileges required
Show raw CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
81.55%
predictive model; CISA confirms active exploitation
percentile 99.6%
CISA Known Exploited Vulnerability
- Added to KEV
- 2022-02-15
- Remediation deadline
- 2022-08-15
- Required action
- Apply updates per vendor instructions.
- Ransomware
- Yes, known ransomware campaign