CVE-2019-0665

CVE-2019-0665 is a remote code execution vulnerability in the VBScript engine affecting various Microsoft Windows and Internet Explorer versions. This flaw allows an attacker to execute arbitrary code due to how the engine handles objects in memory. With a CVSS score of 7.5 (HIGH), exploitation requires user interaction (UI:R) and has high impact on confidentiality, integrity, and availability (C:H, I:H, A:H), but with high attack complexity (AC:H). There is no indication of active exploitation (KEV: No), nor is public exploit code available in Metasploit, Nuclei, or ExploitDB. While there is limited community discussion and media coverage, Microsoft released a patch for this vulnerability in March 2019.