What’s Vulnerable › Vulnerabilities

CVE-2021-26419: Scripting Engine Memory Corruption Vulnerability

• Severity: high (CVSS 7.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 22.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-05-11 · updated 2026-06-17
• Weakness: CWE-787

Description

Scripting Engine Memory Corruption Vulnerability

Affected products

• Microsoft Internet Explorer 11: 11, 9
• Microsoft Internet Explorer 11: from 1.0.0 before 10.0.14393.4401; from 1.0.0 before 10.0.17134.2207; from 1.0.0 before 10.0.17763.1935; from 1.0.0 before 10.0.18363.1556; from 1.0.0 before 10.0.19041.982; from 1.0.0 before 10.0.10240.18931 — fixed in 10.0.14393.4401, 10.0.17134.2207, 10.0.17763.1935, 10.0.18363.1556, 10.0.19041.982, 10.0.10240.18931
• Microsoft Internet Explorer 9: from 1.0.0 before 6.0.6003.21117; from 1.0.0 before 6.0 — fixed in 6.0.6003.21117, 6.0

How to fix

Upgrade to a fixed version: Microsoft Internet Explorer 11 10.0.14393.4401, 10.0.17134.2207, 10.0.17763.1935, 10.0.18363.1556; Microsoft Internet Explorer 9 6.0.6003.21117, 6.0. Check the vendor advisory for mitigations.

References

• http://packetstormsecurity.com/files/162570/Internet-Explorer-jscript9.dll-Memory-Corruption.html
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26419
• http://packetstormsecurity.com/files/162570/Internet-Explorer-jscript9.dll-Memory-Corruption.html
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26419

Get alerted when CVE-2021-26419 or the next vulnerability affects your stack