What is the severity of CVE-2019-0995?

CVE-2019-0995 has a severity rating of Important, indicating a moderate risk of exploitation.

How do I fix CVE-2019-0995?

To mitigate CVE-2019-0995, ensure that you have installed the latest security updates provided by Microsoft for Internet Explorer.

What software is affected by CVE-2019-0995?

CVE-2019-0995 primarily affects Internet Explorer 11 and certain versions of Microsoft Windows 10.

Can CVE-2019-0995 be exploited remotely?

Yes, CVE-2019-0995 could potentially be exploited remotely if a user opens a specially crafted file or visits a malicious webpage.

What does CVE-2019-0995 involve?

CVE-2019-0995 involves a security feature bypass vulnerability in urlmon.dll, allowing for improper handling of Mark of the Web queries.

Vulnerability/
CVE-2019-0995

high

8.8

16/5/2019

4/8/2024

CVE-2019-0995

First published: Thu May 16 2019(Updated: )

A security feature bypass vulnerability exists when urlmon.dll improperly handles certain Mark of the Web queries, aka 'Internet Explorer Security Feature Bypass Vulnerability'.

Credit: secure@microsoft.com

Affected Software	Affected Version	How to fix
Internet Explorer	=11
Microsoft Windows 10	=1607
Microsoft Windows 10	=1703
Microsoft Windows 10	=1709
Microsoft Windows 10	=1803
Microsoft Windows 10	=1809
Microsoft Windows 10	=1903

Remedy

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0995

Never miss a vulnerability like this again

Reference Links

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0995

Frequently Asked Questions

What is the severity of CVE-2019-0995?
CVE-2019-0995 has a severity rating of Important, indicating a moderate risk of exploitation.
How do I fix CVE-2019-0995?
To mitigate CVE-2019-0995, ensure that you have installed the latest security updates provided by Microsoft for Internet Explorer.
What software is affected by CVE-2019-0995?
CVE-2019-0995 primarily affects Internet Explorer 11 and certain versions of Microsoft Windows 10.
Can CVE-2019-0995 be exploited remotely?
Yes, CVE-2019-0995 could potentially be exploited remotely if a user opens a specially crafted file or visits a malicious webpage.
What does CVE-2019-0995 involve?
CVE-2019-0995 involves a security feature bypass vulnerability in urlmon.dll, allowing for improper handling of Mark of the Web queries.

agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/remedy
agent/references
agent/author
agent/severity
agent/last-modified-date
agent/first-publish-date
agent/description
agent/event
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/microsoft
canonical/internet explorer
version/internet explorer/11
canonical/microsoft windows 10
version/microsoft windows 10/1607
version/microsoft windows 10/1703
version/microsoft windows 10/1709
version/microsoft windows 10/1803
version/microsoft windows 10/1809
version/microsoft windows 10/1903

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.