CISA Known Exploited Vulnerability

CVE-2019-1367 Ransomware

Microsoft · Internet Explorer

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Date added
BOD 22-01 due date
CWE CWE-787
Ransomware Known

CISA description

Microsoft Internet Explorer contains a memory corruption vulnerability in how the scripting engine handles objects in memory. Successful exploitation allows for remote code execution in the context of the current user.

Required action

Apply updates per vendor instructions.