{"id":"CVE-2019-0676","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-0676","generatedAt":"2026-10-29T00:58:18.700Z","title":"Microsoft Internet Explorer Information Disclosure Vulnerability","description":"An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vulnerability'.","published":"2019-03-05T23:29:03.000Z","lastModified":"2026-06-17T02:08:41.000Z","status":"Analyzed","sourceIdentifier":"secure@microsoft.com","cvss":{"version":"3.1","score":6.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"},"cwe":[],"affected":["microsoft/internet explorer"],"epss":{"score":0.0811,"percentile":0.94799,"date":"2026-10-27","history":[]},"kev":{"listed":true,"dateAdded":"2022-05-23","dueDate":"2022-06-13","knownRansomwareCampaignUse":"Unknown","notes":"Apply updates per vendor instructions.\nhttps://nvd.nist.gov/vuln/detail/CVE-2019-0676"},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"Known to be exploited in the wild (CISA KEV, CISA remediation deadline 13 June 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise."},"changes":[],"references":[{"url":"http://www.securityfocus.com/bid/106886","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"secure@microsoft.com"},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0676","tags":["Patch","Vendor Advisory"],"source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/106886","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0676","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0676","tags":["US Government Resource"],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-0676","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}