CVE-2019-0658

Опубликовано: 05 мар. 2019

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Средний

Описание

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0648.

Ссылки

http://www.securityfocus.com/bid/106882
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0658
Patch
Vendor Advisory
http://www.securityfocus.com/bid/106882
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0658
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*

Версия до 1.11.6 (исключая)

EPSS

Процентиль: 96%

0.27849

Средний

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2019-0658

CVSS3: 4.3

msrc

почти 7 лет назад

Scripting Engine Information Disclosure Vulnerability

GHSA-w6qv-p5wm-6hvv