CVEブラウザに戻る

CVE-2019-0568

HIGH

7.5

CVSS Severity Score

EPSS Score0.1120%

EPSS Percentile10.85th

Published2019年1月8日

Last Modified2024年11月21日

Vulnerability Description

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0539, CVE-2019-0567.

Affected Platforms (CPE)

📦

Microsoft

Chakracore

All versions

📦

Microsoft

Edge

All versions

References & Advisories

🔗 http://www.securityfocus.com/bid/106420

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0568

🔗 https://www.exploit-db.com/exploits/46205/

🔗 http://www.securityfocus.com/bid/106420

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0568

🔗 https://www.exploit-db.com/exploits/46205/

関連する脆弱性情報

CVE-2017-117679.8

ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engin...

CVE-2018-85009.8

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scrip...

CVE-2020-10738.1

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scrip...

CVE-2019-06397.5

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scrip...