Multiple vulnerabilities in Microsoft Browsers

Beschreibung

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to obtain sensitive information, spoof user interface, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Microsoft Edge based on Edge HTML can be exploited remotely via specially crafted content to obtain sensitive information.
2. A spoofing vulnerability in Microsoft Browser can be exploited remotely via specially crafted website to spoof user interface.
3. A remote code execution vulnerability in VBScript can be exploited remotely via specially crafted website to execute arbitrary code.
4. A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
5. A memory corruption vulnerability in Internet Explorer can be exploited remotely via specially crafted website to execute arbitrary code.

Ursprüngliche Informationshinweise

• CVE-2019-1356

• CVE-2019-1357
• CVE-2019-1239
• CVE-2019-1366
• CVE-2019-1308
• CVE-2019-1371
• CVE-2019-1238
• CVE-2019-1307
• CVE-2019-1335
• CVE-2019-0608

Ausnutzung

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Betroffene Produkte

• Microsoft-Internet-Explorer
• Microsoft-Edge
• ChakraCore

CVE Liste

• CVE-2019-1366
  critical
• CVE-2019-1308
  critical
• CVE-2019-1307
  critical
• CVE-2019-1335
  critical
• CVE-2019-1356
  warning
• CVE-2019-1357
  warning
• CVE-2019-1239
  critical
• CVE-2019-1371
  critical
• CVE-2019-1238
  high
• CVE-2019-0608
  warning

KB Liste

• 4520010
• 4520008
• 4520007
• 4519998
• 4520005
• 4517389
• 4519338
• 4520011
• 4520004
• 4519976
• 4519974

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com