EXPOSURES › CVE-2019-1429
CVE-2019-1429
HIGH ⌖ ON CISA KEV · EXPLOITEDMicrosoft Internet Explorer's scripting engine had a memory corruption flaw allowing remote code execution, which was actively exploited in the wild.
A memory corruption vulnerability in Internet Explorer's scripting engine allowed attackers to execute arbitrary code remotely. This is a critical failure for DIB organizations because it represents an unpatched, actively exploited flaw that could compromise systems relying on IE, highlighting the severe risk of relying on legacy software with known, unpatched vulnerabilities.
Shame score — The vulnerability was actively exploited in the wild (KEV) and allowed remote code execution, representing a severe, avoidable failure in patch management and software lifecycle management.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the current user.
"Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the current user."
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |