CVE-2019-0676

An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vulnerability'.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - secure@microsoft.com

Published

2019-03-05

Last modified

2025-10-21

Known exploited (CISA KEV)

since 2022-05-23, action due 2022-06-13: Apply updates per vendor instructions.

Affected products

• Internet Explorer (Microsoft)
• Internet Explorer 10 (Microsoft)
• Internet Explorer 11 (Microsoft)

References

• http://www.securityfocus.com/bid/106886
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0676
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0676