ZeroDay Findings
Sign inSign up

Findings

CVE-2019-1429

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Published Nov 12, 2019 · updated Jun 16, 2026 · microsoft internet explorer

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1426, CVE-2019-1427, CVE-2019-1428.

Timeline

Detection, updates, and resolution for this record.

  1. Nov 12, 2019 · Catalog

    Detected

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1426, CVE-2019-1427, CVE-2019-1428.

  2. Nov 3, 2021 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. May 3, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1426, CVE-2019-1427, CVE-2019-1428.

Required action

Apply updates per vendor instructions.

CISA due date May 3, 2022

Affected

  • cpe microsoft/internet explorer10
  • cpe microsoft/internet explorer11
  • cpe microsoft/internet explorer9
  • vendor Microsoft Internet Explorerversion unspecified

Sources

  • CISA KEVCVE-2019-1429

    Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the current user.

    cisa.gov
  • CVE.orgCVE-2019-1429

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2019-1429

    30-day exploitation probability 77.3%

    first.org
  • Exploit Database47707

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • NIST NVDCVE-2019-1429

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1426, CVE-2019-1427, CVE-2019-1428.

    nvd.nist.gov
  • Packet Storm Securityhttp://packetstormsecurity.com/files/155433/Microsoft-Internet-Explorer-Use-After-Free.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com

References