CVE-2019-1366

7.5HIGH

Key Information:

Vendor: Microsoft
Status: Microsoft Edge (edgehtml-based) On Windows 10 For 32-bit Systems; Microsoft Edge (edgehtml-based) On Windows 10 For X64-based Systems; Microsoft Edge (edgehtml-based) On Windows Server 2016; Microsoft Edge (edgehtml-based) On Windows 10 Version 1607 For 32-bit Systems
Vendor: CVE Published:; 10 October 2019

Summary

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1307, CVE-2019-1308, CVE-2019-1335.

Affected Version(s)

ChakraCore = unspecified

Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems = unspecified

Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems = unspecified

References

https://portal.msrc.microsoft.com/en-US/security-guidance...

x_refsource_MISC

EPSS Score

2% chance of being exploited in the next 30 days.

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

High

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Timeline

Vulnerability published
Oct 10, 2019
Vulnerability Reserved
Nov 26, 2018

Collectors

NVD DatabaseMitre Database