CVE-2019-1238: High severity internet explorer vulnerability
Published Oct 10, 2019
·Updated
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1239.
Affected Software
19 affected components
Microsoft Internet Explorer=11
Microsoft Windows 10
Microsoft Windows 10=1607
Microsoft Windows 10=1703
Microsoft Windows 10=1709
Microsoft Windows 10=1803
Microsoft Windows 10=1809
Microsoft Windows 10=1903
Microsoft Windows 7=sp1
Microsoft Windows 8.1
Microsoft Windows RT 8.1
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Internet Explorer=10
Microsoft Internet Explorer=9
Microsoft Windows Server 2008=sp2
Remediation
Event History
Oct 10, 2019
CVE Published
via MITRE·01:28 PM
Data Sourced
via MITRE·01:28 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-1238?
CVE-2019-1238 has a critical severity rating due to its potential for remote code execution.
2
How do I fix CVE-2019-1238?
To fix CVE-2019-1238, users should apply the latest security updates provided by Microsoft for affected software.
3
Which software is affected by CVE-2019-1238?
CVE-2019-1238 specifically affects Internet Explorer versions 9, 10, and 11.
4
Can CVE-2019-1238 be exploited remotely?
Yes, CVE-2019-1238 can be exploited remotely, allowing an attacker to execute arbitrary code on the victim's machine.
5
Is CVE-2019-1238 specific to certain versions of Windows?
CVE-2019-1238 primarily affects Internet Explorer on Windows operating systems, particularly versions 9 through 11.