medium6.5Known exploited
CVE-2019-0676
Microsoft Internet Explorer Information Disclosure Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-05-23. Federal due date: 2022-06-13.
Apply updates per vendor instructions.
Impact
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vulnerability'.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Explorer | Versions 10, 11 |
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://www.securityfocus.com/bid/106886
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0676
- http://www.securityfocus.com/bid/106886
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0676
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0676