CVE-2019-0846 — Microsoft Windows vulnerability

11 documents3 sources
Severity
7.8HIGHNVD
EPSS
25.6%
top 3.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
22
Microsoft WindowsMicrosoft Windows ServerMicrosoft Windows 10+19 more
Timeline
PublishedApr 9
Latest updateMay 13

Description

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0847, CVE-2019-0851, CVE-2019-0877, CVE-2019-0879.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages20 packages

▶CVEListV5microsoft/windows20 versions+19

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

5
GHSA
GHSA-jc5h-8j67-q8rr: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remot↗2022-05-13
▶
GHSA
GHSA-vxrh-5cvm-mqcq: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remot↗2022-05-13
▶
GHSA
GHSA-cr64-rc8p-fvv7: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remot↗2022-05-13
▶
GHSA
GHSA-54w9-vjm8-6h33: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remot↗2022-05-13
▶
GHSA
GHSA-7f4p-rrf6-2c35: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remot↗2022-05-13
▶

📋Vendor Advisories

1
Microsoft
Jet Database Engine Remote Code Execution Vulnerability↗2019-04-09
▶
CVE-2019-0846 — Microsoft Windows vulnerability | cvebase