CVE-2019-1238

—

CVSS 3.1

6.4 medium

EPSS

6%p93

Published

Oct 10, 2019 (Oct 10, 2019)

Modified

Jun 17, 2026

Description

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1239.

Vendors: microsoft
Products: internet explorer
Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (5.9%)

In the news3 stories

MS October 2019 Patch Tuesday updates address 59 flaws

Security AffairsOct 8, 20:46 UTC · Oct 8, 2019Vulnerability CVE-2019-1238 CVE-2019-1239 CVE-2019-1338

Microsoft Releases October 2019 Patch Tuesday Updates

The Hacker NewsOct 8, 18:12 UTC · Oct 8, 2019Vulnerability in the wildCVE-2019-1238 CVE-2019-1239

Microsoft Patch Tuesday — Oct. 2019: Vulnerability disclosures and Snort coverage

Cisco TalosOct 8, 17:11 UTC · Oct 8, 2019Vulnerability CVE-2019-1333 CVE-2019-1238 CVE-2019-1239+57 CVEs