Multiple vulnerabilities in Microsoft Browsers

説明

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to obtain sensitive information, spoof user interface, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Microsoft Edge based on Edge HTML can be exploited remotely via specially crafted content to obtain sensitive information.
2. A spoofing vulnerability in Microsoft Browser can be exploited remotely via specially crafted website to spoof user interface.
3. A remote code execution vulnerability in VBScript can be exploited remotely via specially crafted website to execute arbitrary code.
4. A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
5. A memory corruption vulnerability in Internet Explorer can be exploited remotely via specially crafted website to execute arbitrary code.

オリジナルアドバイザリー

• CVE-2019-1356

• CVE-2019-1357
• CVE-2019-1239
• CVE-2019-1366
• CVE-2019-1308
• CVE-2019-1371
• CVE-2019-1238
• CVE-2019-1307
• CVE-2019-1335
• CVE-2019-0608

エクスプロイテーション

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

関連製品

• Microsoft-Internet-Explorer
• Microsoft-Edge
• ChakraCore

CVEリスト

• CVE-2019-1366
  critical
• CVE-2019-1308
  critical
• CVE-2019-1307
  critical
• CVE-2019-1335
  critical
• CVE-2019-1356
  warning
• CVE-2019-1357
  warning
• CVE-2019-1239
  critical
• CVE-2019-1371
  critical
• CVE-2019-1238
  high
• CVE-2019-0608
  warning

KBリスト

• 4520010
• 4520008
• 4520007
• 4519998
• 4520005
• 4517389
• 4519338
• 4520011
• 4520004
• 4519976
• 4519974

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com