Back to CVE Browser

CVE-2019-0568

HIGH

7.5

CVSS Severity Score

EPSS Score0.1120%

EPSS Percentile10.85th

PublishedJan 8, 2019

Last ModifiedNov 21, 2024

Vulnerability Description

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0539, CVE-2019-0567.

Affected Platforms (CPE)

📦

Microsoft

Chakracore

All versions

📦

Microsoft

Edge

All versions

References & Advisories

🔗 http://www.securityfocus.com/bid/106420

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0568

🔗 https://www.exploit-db.com/exploits/46205/

🔗 http://www.securityfocus.com/bid/106420

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0568

🔗 https://www.exploit-db.com/exploits/46205/

Related Vulnerabilities

CVE-2017-117679.8

ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engin...

CVE-2018-85009.8

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scrip...

CVE-2020-10738.1

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scrip...

CVE-2019-06397.5

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scrip...