Multiple vulnerabilities in Microsoft Browsers

Description

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to obtain sensitive information, spoof user interface, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Microsoft Edge based on Edge HTML can be exploited remotely via specially crafted content to obtain sensitive information.
2. A spoofing vulnerability in Microsoft Browser can be exploited remotely via specially crafted website to spoof user interface.
3. A remote code execution vulnerability in VBScript can be exploited remotely via specially crafted website to execute arbitrary code.
4. A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
5. A memory corruption vulnerability in Internet Explorer can be exploited remotely via specially crafted website to execute arbitrary code.

Fiches de renseignement originales

• CVE-2019-1356

• CVE-2019-1357
• CVE-2019-1239
• CVE-2019-1366
• CVE-2019-1308
• CVE-2019-1371
• CVE-2019-1238
• CVE-2019-1307
• CVE-2019-1335
• CVE-2019-0608

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Produits associés

• Microsoft-Internet-Explorer
• Microsoft-Edge
• ChakraCore

Liste CVE

• CVE-2019-1366
  critical
• CVE-2019-1308
  critical
• CVE-2019-1307
  critical
• CVE-2019-1335
  critical
• CVE-2019-1356
  warning
• CVE-2019-1357
  warning
• CVE-2019-1239
  critical
• CVE-2019-1371
  critical
• CVE-2019-1238
  high
• CVE-2019-0608
  warning

Liste KB

• 4520010
• 4520008
• 4520007
• 4519998
• 4520005
• 4517389
• 4519338
• 4520011
• 4520004
• 4519976
• 4519974

En savoir plus

Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com