OnlyPatch
Internet Explorer

CVE-2019-0676 — Internet Explorer Information Disclosure Vulnerability

Low CVSS 6.5 EPSS 0.07505 ⚠️ Exploited in the wild 2019-02 archive

Executive Summary

An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could test for the presence of files on disk. For an attack to be successful, an attacker must persuade a user to open a malicious website. The security update addresses the vulnerability by changing the way Internet Explorer handles objects in memory.

Overview

6.5
CVSS MEDIUM
Low
MS Severity
Exploited
MS Exploit Status
Exploitation Detected
MS Exploit Likelihood
Category Information Disclosure
Released Feb 12 2019
Last Updated Feb 12 2019
Publicly Disclosed No
CISA KEV Not Listed
Known Exploits None Known
EPSS Score 0.07505 — 0.93845 percentile
NVD CVSS 6.5 MEDIUM — differs from MSRC

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
ATTACK VECTOR
Network
ATTACK COMPLEXITY
Low
PRIVILEGES REQUIRED
None
USER INTERACTION
Required
SCOPE
Unchanged
CONFIDENTIALITY
Low
INTEGRITY
None
AVAILABILITY
None
EXPLOIT CODE MATURITY
Proof-of-Concept
REMEDIATION LEVEL
Official Fix
REPORT CONFIDENCE
Confirmed
Temporal Score: 3.9

EPSS Score

0.07505
probability of exploitation in the next 30 days
0.93845 percentile - updated 2026-07-25
View on FIRST.org

Affected Products

18 affected products
Product KB Article Severity Impact Restart Required
Internet Explorer 10 on Windows Server 2012 4487025 (Monthly Rollup) 4486474 (IE Cumulative) Low Information Disclosure 4480965 Base: 2.4 Temporal: 2.2 Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C Yes None Internet Explorer 11 on Windows 10 for 32-bit Systems 4487018 (Security Update) Important Information Disclosure Yes
Internet Explorer 11 on Windows 10 for x64-based Systems 4487018 (Security Update) Important Information Disclosure Yes
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems 4487026 (Security Update) Important Information Disclosure Yes
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems 4487026 (Security Update) Important Information Disclosure Yes
Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems 4487020 (Security Update) Important Information Disclosure Yes
Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems 4487020 (Security Update) Important Information Disclosure Yes
Internet Explorer 11 on Windows 10 Version 1709 for 32-bit Systems 4486996 (Security Update) Important Information Disclosure Yes
Internet Explorer 11 on Windows 10 Version 1709 for ARM64-based Systems 4486996 (Security Update) Important Information Disclosure Yes
Internet Explorer 11 on Windows 10 Version 1709 for x64-based Systems 4486996 (Security Update) Important Information Disclosure Yes
Internet Explorer 11 on Windows 10 Version 1803 for 32-bit Systems 4487017 (Security Update) Important Information Disclosure Yes
Internet Explorer 11 on Windows 10 Version 1803 for ARM64-based Systems 4487017 (Security Update) Important Information Disclosure Yes
Internet Explorer 11 on Windows 10 Version 1803 for x64-based Systems 4487017 (Security Update) Important Information Disclosure Yes
Internet Explorer 11 on Windows 10 Version 1809 for 32-bit Systems 4487044 (Security Update) Important Information Disclosure Yes
Internet Explorer 11 on Windows 10 Version 1809 for ARM64-based Systems 4487044 (Security Update) Important Information Disclosure Yes
Internet Explorer 11 on Windows 10 Version 1809 for x64-based Systems 4487044 (Security Update) Important Information Disclosure Yes
Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1 4486563 (Monthly Rollup) 4486474 (IE Cumulative) Important Information Disclosure 4480970 4480965 Base: 4.3 Temporal: 3.9 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C Yes None Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1 4486563 (Monthly Rollup) 4486474 (IE Cumulative) Important Information Disclosure 4480970 4480965 Base: 4.3 Temporal: 3.9 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C Yes None Internet Explorer 11 on Windows 8.1 for 32-bit systems 4487000 (Monthly Rollup) 4486474 (IE Cumulative) Important Information Disclosure 4480963 4480965 Base: 4.3 Temporal: 3.9 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C Yes None Internet Explorer 11 on Windows 8.1 for x64-based systems 4487000 (Monthly Rollup) 4486474 (IE Cumulative) Important Information Disclosure 4480963 4480965 Base: 4.3 Temporal: 3.9 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C Yes None Internet Explorer 11 on Windows RT 8.1 4487000 (Monthly Rollup) Important Information Disclosure Yes
Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 4486563 (Monthly Rollup) 4486474 (IE Cumulative) Low Information Disclosure 4480970 4480965 Base: 2.4 Temporal: 2.2 Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C Yes None Internet Explorer 11 on Windows Server 2012 R2 4487000 (Monthly Rollup) 4486474 (IE Cumulative) Low Information Disclosure 4480963 4480965 Base: 2.4 Temporal: 2.2 Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C Yes None Internet Explorer 11 on Windows Server 2016 4487026 (Security Update) Low Information Disclosure Yes
Internet Explorer 11 on Windows Server 2019 4487044 (Security Update) Low Information Disclosure Yes

Patches

7 patches
Article Type Restart
4487018 Security Update Yes
4487026 Security Update Yes
4487020 Security Update Yes
4486996 Security Update Yes
4487017 Security Update Yes
4487044 Security Update Yes
4487000 Monthly Rollup Yes

Known Exploits

Acknowledgments

Clement Lecigne of Google’s Threat Analysis Group

On This Page