KLA11388
Multiple vulnerabilities in Microsoft Browsers
Updated: 03/15/2019
Detect date
?
12/11/2018
Severity
?
Critical
Description

Multiple serious vulnerabilities were found in Microsoft Browsers Malicious users can exploit these vulnerabilities to execute arbitrary code.

Below is a complete list of vulnerabilities:

  1. A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
  2. A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
  3. A memory corruption vulnerability in Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
  4. A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
  5. A memory corruption vulnerability in Internet Explorer can be exploited remotely via specially crafted website to execute arbitrary code.
  6. A remote code execution vulnerability in Windows VBScript Engine can be exploited remotely via specially crafted website to execute arbitrary code.
  7. A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
  8. A remote code execution vulnerability in Internet Explorer can be exploited remotely via specially crafted content to execute arbitrary code.
  9. A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
Affected products

Internet Explorer 10
Internet Explorer 11
Internet Explorer 9
Microsoft Edge

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories

CVE-2018-8583
CVE-2018-8624
CVE-2018-8643
CVE-2018-8617
CVE-2018-8631
CVE-2018-8625
CVE-2018-8629
CVE-2018-8619
CVE-2018-8618

Impacts
?
ACE 
[?]
Related products
Microsoft Internet Explorer
Microsoft Edge
CVE-IDS
?
CVE-2018-85834.2Critical
CVE-2018-86244.2Critical
CVE-2018-86294.2Critical
CVE-2018-86174.2Critical
CVE-2018-86184.2Critical
CVE-2018-86437.5Critical
CVE-2018-86317.5Critical
CVE-2018-86257.5Critical
CVE-2018-86197.5Critical
KB list

4471329
4471323
4471324
4471327
4471321
4471332
4471320
4471330
4471318
4471325
4470199

Microsoft official advisories
Microsoft Security Update Guide