CVE Watch12 ago 2026

CVE-2019-0752

Microsoft Internet Explorer Type Confusion Vulnerability

CVSS

7.5

Alto

EPSS

81.7%

p100

KEV

SÍ

15 feb 2022

Exploit Today

0-100

Publicado: 9 abr 2019 · Última mod.: 12 ago 2026 · CWE-843

EPSS · 30d

81.6%EPSS · 30 días81.7%

2026-09-172026-10-15

Ficha del catálogo KEV

Producto

Microsoft / Internet Explorer

Vulnerabilidad

Microsoft Internet Explorer Type Confusion Vulnerability

Añadido a KEV

15 feb 2022

Remediar antes de

15 ago 2022

Uso conocido en ransomware

Sí

Descripción resumida

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2019-0752

Descripción técnica

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-0314—

0.8%

——0A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition. The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.17h CVE-2026-1101408.8 ALT

24.5%

——7Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)1d CVE-2026-969215.5 MED

32.2%

——10Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.3d CVE-2026-968545.5 MED

21.8%

——7Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.3d CVE-2026-853777.8 ALT

23.1%

——7Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.3d CVE-2026-837637.8 ALT

27.6%

——8Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.3d