Multiple vulnerabilities in Microsoft Browsers

Popis

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to obtain sensitive information, spoof user interface, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Microsoft Edge based on Edge HTML can be exploited remotely via specially crafted content to obtain sensitive information.
2. A spoofing vulnerability in Microsoft Browser can be exploited remotely via specially crafted website to spoof user interface.
3. A remote code execution vulnerability in VBScript can be exploited remotely via specially crafted website to execute arbitrary code.
4. A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
5. A memory corruption vulnerability in Internet Explorer can be exploited remotely via specially crafted website to execute arbitrary code.

Oficiální doporučení

• CVE-2019-1356

• CVE-2019-1357
• CVE-2019-1239
• CVE-2019-1366
• CVE-2019-1308
• CVE-2019-1371
• CVE-2019-1238
• CVE-2019-1307
• CVE-2019-1335
• CVE-2019-0608

Vykořisťování

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Související produkty

• Microsoft-Internet-Explorer
• Microsoft-Edge
• ChakraCore

seznam CVE

• CVE-2019-1366
  critical
• CVE-2019-1308
  critical
• CVE-2019-1307
  critical
• CVE-2019-1335
  critical
• CVE-2019-1356
  warning
• CVE-2019-1357
  warning
• CVE-2019-1239
  critical
• CVE-2019-1371
  critical
• CVE-2019-1238
  high
• CVE-2019-0608
  warning

seznam KB

• 4520010
• 4520008
• 4520007
• 4519998
• 4520005
• 4517389
• 4519338
• 4520011
• 4520004
• 4519976
• 4519974

Zobrazit více

Zjistěte statistiky zranitelností šířících se ve vaší oblasti statistics.securelist.com