CVE-2019-0567
7.5HIGH
Key Information
- Vendor
- Microsoft
- Status
- Microsoft Edge
- Chakracore
- Vendor
- CVE Published:
- 8 January 2019
Badges
👾 Exploit Exists🔴 Public PoC🟡 EPSS 88%
Summary
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0539, CVE-2019-0568.
Affected Version(s)
Microsoft Edge = Windows 10 for 32-bit Systems
Microsoft Edge = Windows 10 for x64-based Systems
Microsoft Edge = Windows 10 Version 1607 for 32-bit Systems
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
EPSS Score
88% chance of being exploited in the next 30 days.
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
- 👾
Exploit exists.
Vulnerability published.
Vulnerability Reserved.
Collectors
NVD DatabaseMitre Database2 Proof of Concept(s)