CVE-2019-0752

This exploit leverages a memory corruption vulnerability in Internet Explorer's scripting engine to achieve arbitrary write primitives, ultimately leading to remote code execution via PowerShell. It uses CVE-2019-0768 to bypass mitigations and execute VBScript on Windows 10 1809.

This PoC exploits CVE-2019-0752, a write-what-where vulnerability in Internet Explorer 11, allowing RCE without native code execution. It dynamically creates DOM elements via JavaScript to bypass static HTML and avoids PowerShell usage through address manipulation.

The repository provides a technical summary and reference to a blog post detailing the exploitation of CVE-2019-0752, a write-what-where vulnerability in Internet Explorer 11. It describes the use of JavaScript to dynamically create DOM elements and avoid static HTML, targeting Windows 10 systems up to RS4/RS5.