CVE-2019-0676
Medium 6.5 Exploited in the wild (KEV)
Confirmed active exploitation — CISA KEV catalog
- Name
- Microsoft Internet Explorer Information Disclosure Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply updates per vendor instructions.
Description
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vulnerability'.
Metrics
- CVSS 3.1
-
6.5 (MEDIUM)
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - EPSS — exploit probability
- 8% (percentile: 95) as of 1 November 2026
Affected products
microsoft: internet explorer; microsoft: windows server 2012; microsoft: windows 10 1507; microsoft: windows 10 1607; microsoft: windows 10 1703; microsoft: windows 10 1709; microsoft: windows 10 1803; microsoft: windows 10 1809; microsoft: windows 7; microsoft: windows 8.1; microsoft: windows rt 8.1; microsoft: windows server 2008; microsoft: windows server 2016; microsoft: windows server 2019
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0676 PatchVendor Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0676 PatchVendor Advisory
- http://www.securityfocus.com/bid/106886 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/106886 Broken LinkThird Party AdvisoryVDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019… US Government Resource