CVE-2019-6453: Mirc

High severity, CVSS 8.1. EPSS: 54.3% chance of exploitation in the next 30 days.

mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that loads an arbitrary .ini file from a UNC share pathname. Exploitation depends on browser-specific URI handling (Chrome is not exploitable).

Affected products

• Mirc Mirc: before 7.55 (fixed in 7.55)

Published 2019-02-18. Last modified 2026-06-17.