Junglewise Threat Intelligence

CVE-2019-1429: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

CVE-2019-1429 · Severity: critical · CVSS 7.5 · Exploited in the wild · Published 2021-11-03

Technologies: Microsoft Internet Explorer. Vendors: Microsoft.

Executive brief

A remote code execution vulnerability exists in Microsoft Internet Explorer's scripting engine due to improper handling of objects in memory. An attacker could exploit this memory corruption to execute arbitrary code in the context of the current user, typically by enticing a user to visit a specially crafted website.

Affected products

  • Microsoft Internet Explorer 10, 11

Timeline

  • 2019-11-12: disclosed: MSRC advisory published
  • 2021-11-03: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
  • 2021-11-03: exploited: Reported as exploited in the wild per CISA KEV and advisory metadata.

Related threats