cbcvebase.
CVE-2019-0592
published 2019-04-08

CVE-2019-0592: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…

high7.5CVSS 3.0
AVNACHPRNUIRSUCHIHAH
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0611.

Affected

19 ranges
VendorProductVersion rangeFixed in
microsoftchakracore< 1.11.71.11.7
microsoftchakracore
microsoftmicrosoft_edge
microsoftmicrosoft_edge
microsoftmicrosoft_edge
microsoftmicrosoft_edge
microsoftmicrosoft_edge
microsoftmicrosoft_edge
microsoftmicrosoft_edge
microsoftmicrosoft_edge
microsoftmicrosoft_edge
microsoftmicrosoft_edge
microsoftmicrosoft_edge
microsoftmicrosoft_edge
msrcchakracore
msrcmicrosoft_edge_on_windows_10_version_1809_for_32-bit_systems
msrcmicrosoft_edge_on_windows_10_version_1809_for_arm64-based_systems
msrcmicrosoft_edge_on_windows_10_version_1809_for_x64-based_systems
msrcmicrosoft_edge_on_windows_server_2019

CVSS provenance

nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
ghsa7.5HIGH
osv7.5HIGH