Zero-day memory corruption vulnerability in Internet Explorer has been observed in attacks in the wild Background On September 23, Microsoft released an out-of-band patch for a zero-day vulnerability in Internet Explorer that has been exploited in the wild.

CVE-2019-1367: Critical Internet Explorer Memory Corruption Vulnerability Exploited In The Wild

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1221.

The Internet Explorer installation on the remote host is missing security  updates. It is, therefore, affected by a remote code execution vulnerability in the way that the scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.

Detections

Analytics

CVE-2019-1367

high

Tenable Plugins

high