Kaspersky Threats

Detect date

?

11/12/2019

Severity

?

Critical

Description

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code.

Below is a complete list of vulnerabilities:

A security feature bypass vulnerability in Microsoft Edge can be exploited remotely via specially crafted website to bypass security restrictions.
A memory corruption vulnerability in Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
A remote code execution vulnerability in VBScript can be exploited remotely via specially crafted website to execute arbitrary code.

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Affected products

Internet Explorer 9
Internet Explorer 10
ChakraCore
Microsoft Edge (EdgeHTML-based)
Internet Explorer 11

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories

CVE-2019-1413
CVE-2019-1426
CVE-2019-1429
CVE-2019-1428
CVE-2019-1390
CVE-2019-1427

Impacts

?

ACE

[?]

SB

[?]

Detect date ?	11/12/2019
Severity ?	Critical
Description	Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: A security feature bypass vulnerability in Microsoft Edge can be exploited remotely via specially crafted website to bypass security restrictions. A memory corruption vulnerability in Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code. A remote code execution vulnerability in VBScript can be exploited remotely via specially crafted website to execute arbitrary code.
Exploitation	Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
Affected products	Internet Explorer 9 Internet Explorer 10 ChakraCore Microsoft Edge (EdgeHTML-based) Internet Explorer 11
Solution	Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories	CVE-2019-1413 CVE-2019-1426 CVE-2019-1429 CVE-2019-1428 CVE-2019-1390 CVE-2019-1427
Impacts ?	ACE [?] SB [?]
Related products	Microsoft Internet Explorer Microsoft Edge ChakraCore
CVE-IDS ?	CVE-2019-14134.3Warning CVE-2019-14267.6Critical CVE-2019-14297.6Critical CVE-2019-14287.6Critical CVE-2019-13907.6Critical CVE-2019-14277.6Critical
Microsoft official advisories	Microsoft Security Update Guide
KB list	4525246 4525243 4524570 4525235 4525237 4525232 4525106 4525236 4523205 4525241
	Find out the statistics of the vulnerabilities spreading in your region

KLA11605Multiple vulnerabilities in Microsoft Browser

KLA11605
Multiple vulnerabilities in Microsoft Browser