CVE-2015-2419VulnerabilityPublished 03/28/2022Updated 10/24/2026

CVE-2015-2419: Microsoft Internet Explorer Memory Corruption Vulnerability

Affects Microsoft Internet ExplorerSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 03/28/2022
KEV deadline: 04/18/2022
EPSS: 53.1% chance of exploitation in 30 days – higher than 98% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2015-2419 (opens in a new tab)

Description

CVE-2015-2419 is a memory corruption vulnerability in the JScript engine of Microsoft Internet Explorer. It allows remote attackers to execute arbitrary code or cause a denial of service by crafting malicious web content. This vulnerability has been exploited in the wild.

Summary

The vulnerability in Microsoft Internet Explorer's JScript engine enables remote attackers to trigger memory corruption via a specially crafted website, potentially leading to remote code execution or denial of service. The flaw is identified as CWE-119 (improper restriction of operations within the bounds of a memory buffer). Exploitation has been observed in the wild, indicating active use by attackers.

Impact

Successful exploitation can allow remote attackers to execute arbitrary code with the privileges of the user running Internet Explorer or cause the browser to crash, resulting in denial of service.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.

Weaknesses

CWE-119Buffer Errors (Memory Bounds) (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 11:11:40 UTC

Weaknesses

References

Related threats