Skip to main content
IMMUNITYSEC

CVE-2019-0752

7.5
HIGH
CVSS 3.1
EPSS 81.7% · 100th pctCISA KEV · Exploited in the wild
2019-04-09Updated 2026-08-12KEV 2022-02-15
CISA Known Exploited Vulnerabilities

Microsoft Internet Explorer Type Confusion Vulnerability is confirmed as actively exploited and is listed in the CISA KEV catalog.

Added to KEV
2022-02-15
Remediation due
2022-08-15
Ransomware
Known use

Required action
Apply updates per vendor instructions.

CISA notes
https://nvd.nist.gov/vuln/detail/CVE-2019-0752

Description

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862.

Severity

CVSS 3.1 · CISA7.5 HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
SSVC · CISA-ADP
Exploitationactive
Automatableno
Technical impacttotal

Exploitation Context

as of October 13, 2026
All KEV statistics→
  • CISA added CVE-2019-0752 to the KEV catalog 1,043 days after its CVE record was published.
  • It is one of 390 Microsoft entries in the CISA KEV catalog, and one of 166 added in 2022.
  • Its current EPSS score (81.7%) is higher than that of 65% of CISA KEV entries.

Affected Products

ProductAffected versions
Microsoft
Internet Explorer 11
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows Server 2012 R2
Windows RT 8.1
Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Windows Server 2016
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows 10 Version 1703 for 32-bit Systems
Windows 10 Version 1703 for x64-based Systems
Windows 10 Version 1709 for 32-bit Systems
Windows 10 Version 1709 for x64-based Systems
Windows 10 Version 1803 for 32-bit Systems
Windows 10 Version 1803 for x64-based Systems
Windows 10 Version 1803 for ARM64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for ARM64-based Systems
Windows Server 2019
Windows 10 Version 1709 for ARM64-based Systems
Microsoft
Internet Explorer 10
Windows Server 2012

References

3 Links

Record Details

Published
2019-04-09
Last updated
2026-08-12
Assigner (CNA)
microsoft
Credited to
-

More from Microsoft

All Microsoft CVEs→
CVE-2010-39628.1 HIGH

Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability

KEVEPSS 96.8%2010-11-05
CVE-2016-01897.5 HIGH

Microsoft Internet Explorer Memory Corruption Vulnerability

KEVEPSS 94.1%2016-05-11
CVE-2010-02498.8 HIGH

Microsoft Internet Explorer Use-After-Free Vulnerability

KEVEPSS 91.9%2010-01-15
CVE-2013-38938.8 HIGH

Microsoft Internet Explorer Resource Management Errors Vulnerability

KEVEPSS 87.5%2013-09-18

CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.