CVE-2019-1193

Severity
6.4MEDIUM
EPSS
1.4%
top 19.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedAug 14
Latest updateMay 24

Description

A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then i

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:HExploitability: 0.5 | Impact: 5.9

Affected Packages4 packages

CVEListV5microsoft/internet_explorer_101.0.0publication
CVEListV5microsoft/internet_explorer_111.0.0publication
CVEListV5microsoft/microsoft_edge_(edgehtml-based)1.0..0publication

Patches

🔴Vulnerability Details

2
GHSA
GHSA-4mxp-65j2-fm9w: A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vul2022-05-24
CVEList
Microsoft Browser Memory Corruption Vulnerability2019-08-14

📋Vendor Advisories

1
Microsoft
Microsoft Browser Memory Corruption Vulnerability2019-08-13
CVE-2019-1193 (MEDIUM CVSS 6.4) | A remote code execution vulnerabili | cvebase.io