PT-2019-1504 · Microsoft · Internet Explorer

Published 2019-02-12 · Updated 2025-10-29 · CVE-2019-0676

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Internet Explorer (affected versions not specified)

Description An information disclosure issue exists due to improper handling of objects in memory by Internet Explorer. This could allow an attacker to test for the presence of files on disk. Successful exploitation requires persuading a user to open a malicious website, potentially allowing a remote attacker to access protected information using a specially crafted web page.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2019-00946

CVE-2019-0676

Affected Products

Internet Explorer

References · 10

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0676 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-0676 · Security Note
• https://osv.dev/vulnerability/CVE-2019-0676 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-00946 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0676 · Security Note
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0676 · Note
• http://securityfocus.com/bid/106886 · Note
• https://t.me/cveNotify/140814 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog · Note
• https://t.me/cvenotify/118617 · Telegram Post