CVE-2019-0680

CVE-2019-0680 describes a remote code execution vulnerability within the Internet Explorer scripting engine, stemming from how it handles objects in memory. This flaw impacts various Microsoft Windows operating systems and Internet Explorer versions. With a CVSS score of 7.5 (HIGH), successful exploitation requires user interaction (e.g., clicking a malicious link) and could lead to complete compromise of confidentiality, integrity, and availability. While no public exploit code (Metasploit, Nuclei, ExploitDB) is currently available, the vulnerability has received some community discussion and media coverage, indicating awareness. It is not listed on CISA's KEV catalog as being actively exploited.