CVE-2019-0889Microsoft Windows vulnerability

29 documents4 sources
Severity
8.8HIGHNVD
NVD7.8
EPSS
28.1%
top 3.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMay 16
Latest updateMay 24

Description

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895, CVE-2019-0896, CVE-2019-0897, CVE-2019-0898, CVE-2019-0899, CVE-2019-0900, CVE-2019-0901, CVE-2019-0902.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages23 packages

Patches

🔴Vulnerability Details

13
GHSA
GHSA-2xv7-mq7h-x6hc: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remot2022-05-24
GHSA
GHSA-52wp-wv2r-ghx8: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remot2022-05-24
GHSA
GHSA-xx2h-vg66-mpr3: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remot2022-05-24
GHSA
GHSA-9g7x-6rg8-c362: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remot2022-05-24
GHSA
GHSA-92c7-c9vc-w759: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remot2022-05-24

📋Vendor Advisories

1
Microsoft
Jet Database Engine Remote Code Execution Vulnerability2019-05-14

🕵️Threat Intelligence

2
Unit42
Unit 42 Discovers 10 New Microsoft Vulnerabilities2019-06-20
Unit42
Unit 42 Discovers 10 New Microsoft Vulnerabilities2019-06-20
CVE-2019-0889 — Microsoft Windows vulnerability | cvebase