← back
CVE-2019-0995

CVE-2019-0995

EPSS 4.9%
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 4.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
16 May 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A security feature bypass vulnerability exists when urlmon.dll improperly handles certain Mark of the Web queries, aka 'Internet Explorer Security Feature Bypass Vulnerability'.
Affected products
Microsoft · Internet Explorer 11Microsoft · Internet Explorer 11 on Windows 10 Version 1903 for 32-bit SystemsMicrosoft · Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based SystemsMicrosoft · Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems
References
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0995