{"id":"CVE-2019-0752","published":"2019-04-09T21:29:00Z","modified":"2026-08-12T05:17:19Z","title":"Microsoft Internet Explorer Type Confusion Vulnerability","vendor":"Microsoft","product":"Internet Explorer","tier":"core","eol":{"product":"Internet Explorer","since":"2022-06-15","note":"No security updates; remove it."},"description":{"text":"A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862.","provenance":"source","from":"NVD"},"summary":{"text":"The flaw is a type confusion (CWE: access of a resource using an incompatible type) in the scripting engine's handling of objects in memory in Microsoft Internet Explorer, which leads to memory corruption. An attacker can achieve remote code execution by getting a user to interact with content crafted to trigger the flaw, such as visiting a malicious web page, with no authentication required and the attack complexity described as high.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T06:59:33Z"},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","provenance":"source","from":"NVD"},"epss":{"score":0.81679,"percentile":0.99641,"date":"2026-10-28","provenance":"source"},"kev":{"dateAdded":"2022-02-15","dueDate":"2022-08-15","ransomware":true,"requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0752","provenance":"source"},"vulncheckKev":{"dateAdded":"2021-05-20","exploitedFirstSeen":"2021-05-20","ransomware":true,"evidence":[{"url":"https://www.broadcom.com/support/security-center/protection-bulletin/rig-exploit-kit-threat-that-won-t-go-away","date":"2021-05-20"},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","date":"2022-02-15"}],"evidenceTotal":2,"provenance":"source"},"exploited":true,"otx":{"pulseCount":50,"pulses":[{"name":"Actively_Exploited_Kev | Oct 29, 2026","url":"https://otx.alienvault.com/pulse/6ae20c1db17e7057ae7d9ad1","created":"2026-10-28"},{"name":"Actively_Exploited_Kev | Oct 28, 2026","url":"https://otx.alienvault.com/pulse/6ae0ba7e0e2a97ff7b218819","created":"2026-10-27"},{"name":"Actively_Exploited_Kev | Oct 27, 2026","url":"https://otx.alienvault.com/pulse/6adf68b85c3e852f3c111d18","created":"2026-10-26"},{"name":"Actively_Exploited_Kev | Oct 24, 2026","url":"https://otx.alienvault.com/pulse/6adb740e397c3ad4799aa4cd","created":"2026-10-23"},{"name":"Actively_Exploited_Kev | Oct 23, 2026","url":"https://otx.alienvault.com/pulse/6ada236fcfba2dfa730ea482","created":"2026-10-22"},{"name":"Actively_Exploited_Kev | Oct 22, 2026","url":"https://otx.alienvault.com/pulse/6ad8d33a077cbb5cab524d80","created":"2026-10-21"},{"name":"Actively_Exploited_Kev | Oct 21, 2026","url":"https://otx.alienvault.com/pulse/6ad78130c4d1ac2be83a8b6d","created":"2026-10-20"},{"name":"Actively_Exploited_Kev | Oct 20, 2026","url":"https://otx.alienvault.com/pulse/6ad62f63c24a405a3423cc13","created":"2026-10-19"},{"name":"Actively_Exploited_Kev | Oct 19, 2026","url":"https://otx.alienvault.com/pulse/6ad4dda174e5797d0bd238b7","created":"2026-10-18"},{"name":"Actively_Exploited_Kev | Oct 18, 2026","url":"https://otx.alienvault.com/pulse/6ad38c22e1848f8189d1c121","created":"2026-10-17"}],"provenance":"machine"},"cwes":[{"id":"CWE-843","name":"Access of Resource Using Incompatible Type"}],"references":[{"url":"http://packetstormsecurity.com/files/153078/Microsoft-Internet-Explorer-Windows-10-1809-17763.316-Memory-Corruption.html","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0752","tags":["Patch","Vendor Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-19-359/","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/153078/Microsoft-Internet-Explorer-Windows-10-1809-17763.316-Memory-Corruption.html","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0752","tags":["Patch","Vendor Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-19-359/","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0752","tags":["US Government Resource"]}],"techniques":[{"id":"T1189","name":"Drive-by Compromise","tactics":["initial-access"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Browser drive-by via malicious web content","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer","start":2,"end":128}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"},{"id":"T1203","name":"Exploitation for Client Execution","tactics":["execution"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Scripting engine executes attacker code client-side","mappingType":"primary_impact","evidence":[{"from":"description","quote":"remote code execution vulnerability exists in the way that the scripting engine handles objects in memory","start":2,"end":107}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2019-1511","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-1511","exploited":true,"exploitedSince":"2022-02-15","provenance":"source"},"exploits":[{"id":46928,"url":"https://www.exploit-db.com/exploits/46928","title":"Microsoft Internet Explorer Windows 10 1809 17763.316 - Scripting Engine Memory Corruption","type":"remote","platform":"windows","date":"2019-05-24","verified":false,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2019-05-24"},"pocGithub":{"count":1,"skipped":0,"earliest":"2020-12-18","earliestUrl":"https://github.com/edxsh/CVE-2019-0752","repos":[{"name":"edxsh/CVE-2019-0752","url":"https://github.com/edxsh/CVE-2019-0752","stars":2,"created":"2020-12-18"}]},"first":{"date":"2019-05-24","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/46928"},"provenance":"source"},"exploitRefs":["http://packetstormsecurity.com/files/153078/Microsoft-Internet-Explorer-Windows-10-1809-17763.316-Memory-Corruption.html"],"flow":[{"stage":"exploitation","techniques":["T1189"],"provenance":"ai"},{"stage":"primary","techniques":["T1203"],"provenance":"ai"}],"timeline":[{"date":"2019-04-09","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-0752","provenance":"source"},{"date":"2019-05-24","kind":"exploit-public","label":"First public exploit: Exploit-DB (EDB-46928); later: PoC-in-GitHub 2020-12-18","url":"https://www.exploit-db.com/exploits/46928","provenance":"source"},{"date":"2021-05-20","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.broadcom.com/support/security-center/protection-bulletin/rig-exploit-kit-threat-that-won-t-go-away","provenance":"source"},{"date":"2022-02-15","kind":"kev","label":"Added to CISA KEV (known ransomware use)","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","provenance":"source"},{"date":"2022-02-15","kind":"euvd-exploited","label":"ENISA EUVD: exploited","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-1511","provenance":"source"}],"speed":{"daysToPublicExploit":45,"firstExploitFrom":"Exploit-DB","daysToKev":1043},"priority":{"score":63.2,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in CISA KEV and VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1988 days ago"},{"name":"Known ransomware use","points":10.0,"detail":"CISA KEV and VulnCheck KEV: Known"},{"name":"EPSS percentile","points":19.93,"detail":"percentile 0.9964"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit; 1 Exploit-DB entry; 1 PoC-in-GitHub repo"},{"name":"Mentioned in OTX pulses","points":3.0,"detail":"50 pulses"},{"name":"CVSS severity","points":5.25,"detail":"base score 7.5"},{"name":"End-of-life product","points":-15.0,"detail":"No patches exist; remove or isolate it"}]}}