CVE-2019-1367: Zero Day Vulnerability in Internet Explorer Exploited In The Wild

Earlier today, Microsoft released an out-of-band patch for CVE-2019-1367, a memory corruption vulnerability in Internet Explorer that has been exploited in the wild. The vulnerability was discovered and reported by Clément Lecigne of Google’s Threat Analysis Group (TAG). Additional details about the in-the-wild exploitation have not yet been made public by Google’s TAG.

The vulnerability affects Internet Explorer 9, 10, and 11 across Windows 7, Windows 8.1, Windows 10, as well as Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and Windows Server 2019.

For more information, please visit our blog.