NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2019-1238

CVSS 3.1: 6.4 medium
EPSS: 6%p93
Published: Oct 10, 2019 · Oct 10, 2019
Modified: Jun 17, 2026

Analyze CVE-2019-1238 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1239.

Vendors: microsoft

Products: internet explorer

Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (5.9%)

In the news

3 stories

MS October 2019 Patch Tuesday updates address 59 flaws

Security AffairsOct 8, 20:46 UTC · Oct 8, 2019VulnerabilityCVE-2019-1238 CVE-2019-1239 CVE-2019-13382 · 1 read

60

Microsoft Releases October 2019 Patch Tuesday Updates

The Hacker NewsOct 8, 18:12 UTC · Oct 8, 2019VulnerabilityExploitedCVE-2019-1238 CVE-2019-12392 · 1 read

60

Microsoft Patch Tuesday — Oct. 2019: Vulnerability disclosures and Snort coverage

Cisco TalosOct 8, 17:11 UTC · Oct 8, 2019VulnerabilityCVE-2019-1333 CVE-2019-1238 CVE-2019-1239+572 · 1 read

60