Exploitation Summary
CVE-2019-1367 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021, with confirmed use in ransomware campaigns. EIP tracks 1 public exploit from researchers including mandarenmanman.
AI-analyzed exploit summary This repository provides a detailed technical description of CVE-2019-1367, a memory corruption vulnerability in Internet Explorer's script engine that allows remote code execution. It includes affected versions, mitigation steps, and references to Microsoft's patch but lacks functional exploit code.
Description
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1221.
Exploits (1)
This repository provides a detailed technical description of CVE-2019-1367, a memory corruption vulnerability in Internet Explorer's script engine that allows remote code execution. It includes affected versions, mitigation steps, and references to Microsoft's patch but lacks functional exploit code.
References (2)
Scores
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H