CVE-2019-6453

CVE-2019-6453 is a remote command execution vulnerability affecting mIRC versions prior to 7.55, stemming from argument injection via custom URI protocol handlers. An attacker can exploit this by crafting an irc:// URI to load an arbitrary .ini file from a UNC share, though exploitation depends on the victim's browser (Chrome is not vulnerable). With a CVSS score of 8.1 (HIGH), this vulnerability has a high impact on confidentiality, integrity, and availability, and a high EPSS score indicates significant exploitability. While not on the CISA KEV catalog, public exploit code exists on ExploitDB, though there is no evidence of active exploitation or significant community discussion.