Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2019-1367

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1221.

CVSS 7.5 · HighBuzz score 62.0KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 62.0

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 24.0 · diversity 13.0 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
24.0
10 evidence mentions in the snapshot
Diversity score
13.0
4 sources across 2 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
10 source links · newest first
  • Google Sees Drop in Government-Backed Phishing AttemptsSecurityWeek

    Google says it has seen a drop in the number of warnings sent for potential government-backed phishing or malware attempts last year, mainly due to improved protection systems.

    newswww.securityweek.comMar 27, 2020, 7:56 PM
  • Microsoft to Patch Internet Explorer Vulnerability Exploited in Targeted AttacksSecurityWeek

    Microsoft announced on Friday that it’s in the process of developing a patch for a zero-day vulnerability in Internet Explorer that has been exploited in targeted attacks, reportedly by a threat group tracked as DarkHotel. Until a fix becomes available, the company has shared some workarounds and mitigations.

    newswww.securityweek.comJan 20, 2020, 5:12 AM
  • Security Affairs newsletter Round 235Security Affairs

    A new round of the weekly newsletter arrived! The best news of the week with Security Affairs Hi folk, let me inform you that I suspended the newsletter service, anyway I’ll continue to provide you a list of published posts every week through the blog. Hacker is auctioning a database containing details of 92 million […]

    newssecurityaffairs.comOct 13, 2019, 10:12 AM
  • Microsoft Patches 60 Flaws With October 2019 Security UpdatesSecurityWeek

    Microsoft’s Patch Tuesday updates for October 2019 fix 60 vulnerabilities, but none of them appear to have been exploited in attacks and only nine are considered critical.

    newswww.securityweek.comOct 8, 2019, 6:48 PM
  • Users reported problems with patches for CVE-2019-1367 IE zero-daySecurity Affairs

    Patches for Internet Explorer Zero-Day Causing Problems for Many Users Microsoft released a new set of patches for a zero-day flaw in Internet Explorer recently fixed due to problems reported by users with the previous patch. On September 23, Microsoft released an out-of-band patch to address a zero-day memory corruption flaw in Internet Explorer (CVE-2019-1367) that […]

    newssecurityaffairs.comOct 8, 2019, 6:30 AM
  • Patches for Internet Explorer Zero-Day Causing Problems for Many UsersSecurityWeek

    Microsoft has released a new set of security patches for a zero-day vulnerability in Internet Explorer that was initially addressed on September 23 . The initial updates introduced some printing issues, but the new ones also appear to be buggy.

    newswww.securityweek.comOct 7, 2019, 3:58 PM
  • 2nd October – Threat Intelligence BulletinCheck Point Research

    For the latest discoveries in cyber research for the week of 2nd October 2019, please download our Threat Intelligence Bulletin TOP ATTACKS AND BREACHES Check Point researchers have identified a targeted and extensive attack against East Asian government entities over the span of 7 months. The attackers, which apparently are members of the […]

    vendorresearch.checkpoint.comOct 2, 2019, 4:06 PM
  • Microsoft released an out-of-band patch to fix Zero-day flaw exploited in the wildSecurity Affairs

    Microsoft released an out-of-band patch to address a Zero-day memory corruption vulnerability in Internet Explorer that has been exploited in attacks in the wild. Microsoft has released an out-of-band patch for an Internet Explorer zero-day vulnerability that was exploited in attacks in the wild. The vulnerability tracked as CVE-2019-1367 is a memory corruption flaw that resides […]

    newssecurityaffairs.comSep 24, 2019, 12:46 PM
  • Microsoft drops emergency Internet Explorer fix for actively exploited zero-dayHelp Net Security

    Microsoft has unexpectedly released out-of-band security updates to fix vulnerabilities in Internet Explorer and Microsoft Defender. The IE zero-day bug is deemed “critical”, as it’s being actively exploited to achieve partial or complete control of a vulnerable systems. The Internet Explorer vulnerability (CVE-2019-1367) CVE-2019-1367 is a memory corruption vulnerability in the scripting engine that could be exploited to achieve remote code execution. An attacker who successfully exploited the vulnerability could gain the same user rights … More →

    newswww.helpnetsecurity.comSep 24, 2019, 8:14 AM
  • Microsoft Patches Internet Explorer Vulnerability Exploited in AttacksSecurityWeek

    Microsoft on Monday released patches for two vulnerabilities, including an Internet Explorer zero-day and a denial-of-service (DoS) flaw affecting Microsoft Defender.

    newswww.securityweek.comSep 24, 2019, 7:07 AM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence