CVE-2019-0862

CVE-2019-0862 is a remote code execution vulnerability in the scripting engine of Microsoft Internet Explorer, affecting various Windows operating systems including Windows 10, 7, 8.1, and several Windows Server versions. This flaw stems from how the scripting engine handles objects in memory, potentially allowing an attacker to execute arbitrary code. The vulnerability has a CVSS score of 7.5 (High), indicating a significant risk. It requires user interaction (UI:R) and has high impact on confidentiality, integrity, and availability (C:H/I:H/A:H), but with high attack complexity (AC:H). While the vulnerability is not listed in CISA's KEV catalog and there are no known public exploits in Metasploit, Nuclei, or ExploitDB, it did receive some community discussion and media coverage at the time of its disclosure. It is currently considered inactive in terms of active exploitation.