Actively exploited in the wild

Microsoft Internet Explorer Type Confusion Vulnerability

Microsoft - Internet Explorer · Listed in the CISA KEV since 2022-02-15. This indicates confirmed attacks in production environments.

Required action: Apply updates per vendor instructions.

CVE-2019-0752

HighCVSS 7.5KEV

Published: 09/04/2019(UTC)Updated: 12/08/2026(UTC)Translated: 12/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

81.55%

100th percentile - higher than 100% of all known CVEs

Summary

A remote code execution vulnerability exists in the scripting engine of Internet Explorer when handling objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, and CVE-2019-0862.

Risk Assessment

An attacker could exploit this vulnerability to execute arbitrary code in the context of the current user, potentially leading to system compromise or data theft.

Recommendation

Update Internet Explorer to the latest version and apply Microsoft's security patches.

Original NVD description (English source)

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862.