Multiple vulnerabilities in Microsoft Browsers

Descripción

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to obtain sensitive information, spoof user interface, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Microsoft Edge based on Edge HTML can be exploited remotely via specially crafted content to obtain sensitive information.
2. A spoofing vulnerability in Microsoft Browser can be exploited remotely via specially crafted website to spoof user interface.
3. A remote code execution vulnerability in VBScript can be exploited remotely via specially crafted website to execute arbitrary code.
4. A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
5. A memory corruption vulnerability in Internet Explorer can be exploited remotely via specially crafted website to execute arbitrary code.

Notas informativas originales

• CVE-2019-1356

• CVE-2019-1357
• CVE-2019-1239
• CVE-2019-1366
• CVE-2019-1308
• CVE-2019-1371
• CVE-2019-1238
• CVE-2019-1307
• CVE-2019-1335
• CVE-2019-0608

Explotación

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Productos relacionados

• Microsoft-Internet-Explorer
• Microsoft-Edge
• ChakraCore

Lista CVE

• CVE-2019-1366
  critical
• CVE-2019-1308
  critical
• CVE-2019-1307
  critical
• CVE-2019-1335
  critical
• CVE-2019-1356
  warning
• CVE-2019-1357
  warning
• CVE-2019-1239
  critical
• CVE-2019-1371
  critical
• CVE-2019-1238
  high
• CVE-2019-0608
  warning

Lista KB

• 4520010
• 4520008
• 4520007
• 4519998
• 4520005
• 4517389
• 4519338
• 4520011
• 4520004
• 4519976
• 4519974

Leer más

Conozca las estadísticas de las vulnerabilidades que se propagan en su región statistics.securelist.com