CVE-2019-0665

HIGH

Internet Explorer - Remote Code Execution via VBScript Engine Memory Handling

Title source: llm
STIX 2.1

Description

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0666, CVE-2019-0667, CVE-2019-0772.

References (1)

Core 1
Core References

Scores

CVSS v3 7.5
EPSS 0.0826
EPSS Percentile 94.3%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (2)
microsoft/internet_explorer 10
microsoft/internet_explorer 11
Published Apr 08, 2019
Tracked Since Feb 18, 2026