CVE-2019-0645Out-of-bounds Write in Microsoft Edge

CWE-787Out-of-bounds Write19 documents6 sources
Severity
7.5HIGHNVD
EPSS
9.4%
top 7.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 5
Latest updateMay 13

Description

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0634, CVE-2019-0650.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.6 | Impact: 5.9

Affected Packages1 packages

CVEListV5microsoft/microsoft_edge17 versions+16

Patches

🔴Vulnerability Details

6
GHSA
GHSA-xxrg-cc44-fcvc: A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerab2022-05-13
GHSA
GHSA-q9c7-h9h2-ghv8: A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerab2022-05-13
GHSA
GHSA-vw8h-m6gw-gg25: A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerab2022-05-13
CVEList
CVE-2019-0645: A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerab2019-03-06
CVEList
CVE-2019-0650: A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerab2019-03-06

📋Vendor Advisories

1
Microsoft
Microsoft Edge Memory Corruption Vulnerability2019-02-12

🕵️Threat Intelligence

9
Trendmicro
February Patch Tuesday: Batch Includes 77 Updates2019-02-13
Trendmicro
February Patch Tuesday: Batch Includes 77 Updates2019-02-13
Trendmicro
February Patch Tuesday: Batch Includes 77 Updates2019-02-13
Trendmicro
February Patch Tuesday: Batch Includes 77 Updates2019-02-13
Trendmicro
February Patch Tuesday: Batch Includes 77 Updates2019-02-13
CVE-2019-0645 — Out-of-bounds Write in Microsoft Edge | cvebase