CVE-2019-0676

Warnung

EPSS 7.51%
Veröffentlicht 05.03.2019 23:29:02
Zuletzt bearbeitet 29.10.2025 14:45:47
Erkennungen
Login

An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vulnerability'.

Betroffene Produkte Warnungen 1 Metriken 4 CWE 0 Referenzen 6

NVD 2 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Internet Explorer Version 10

Microsoft ≫ Windows Server 2012 Version -

Microsoft ≫ Internet Explorer Version 11 Update -

   Microsoft ≫ Windows 10 1507 Version - HwPlatform x64
   Microsoft ≫ Windows 10 1507 Version - HwPlatform x86
   Microsoft ≫ Windows 10 1607 Version - HwPlatform x64
   Microsoft ≫ Windows 10 1607 Version - HwPlatform x86
   Microsoft ≫ Windows 10 1703 Version - HwPlatform x64
   Microsoft ≫ Windows 10 1703 Version - HwPlatform x86
   Microsoft ≫ Windows 10 1709 Version - HwPlatform arm64
   Microsoft ≫ Windows 10 1709 Version - HwPlatform x64
   Microsoft ≫ Windows 10 1709 Version - HwPlatform x86
   Microsoft ≫ Windows 10 1803 Version - HwPlatform arm64
   Microsoft ≫ Windows 10 1803 Version - HwPlatform x64
   Microsoft ≫ Windows 10 1803 Version - HwPlatform x86
   Microsoft ≫ Windows 10 1809 Version - HwPlatform arm64
   Microsoft ≫ Windows 10 1809 Version - HwPlatform x64
   Microsoft ≫ Windows 10 1809 Version - HwPlatform x86
   Microsoft ≫ Windows 7 Version - Update sp1
   Microsoft ≫ Windows 8.1 Version -
   Microsoft ≫ Windows Rt 8.1 Version -
   Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64
   Microsoft ≫ Windows Server 2012 Version r2
   Microsoft ≫ Windows Server 2016 Version -
   Microsoft ≫ Windows Server 2019 Version -

23.05.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Internet Explorer Information Disclosure Vulnerability

Schwachstelle

An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could test for the presence of files on disk.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	7.51%	0.937

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N
CISA-ADP	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N