Information Disclosure Vulnerability in Microsoft Edge by Microsoft
CVE-2019-1356

6.5MEDIUM

Key Information:

Vendor: Microsoft
Status: Microsoft Edge (edgehtml-based) On Windows Server 2016; Microsoft Edge (edgehtml-based) On Windows 10 Version 1607 For 32-bit Systems; Microsoft Edge (edgehtml-based) On Windows 10 Version 1607 For X64-based Systems; Microsoft Edge (edgehtml-based) On Windows 10 Version 1703 For 32-bit Systems
Vendor: CVE Published:; 10 October 2019

What is CVE-2019-1356?

An information disclosure vulnerability in Microsoft Edge occurs due to improper handling of objects in memory. This may allow an attacker to access sensitive data or system information. Users should ensure they are using the latest version of Microsoft Edge to mitigate this risk, as updates from Microsoft address this issue effectively.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems = unspecified

Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems = unspecified

Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems = unspecified

References

https://portal.msrc.microsoft.com/en-US/security-guidance...

x_refsource_MISC

EPSS Score

15% chance of being exploited in the next 30 days.

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Timeline

Vulnerability published
Oct 10, 2019
Vulnerability Reserved
Nov 26, 2018

JSON

Microsoft