Not rated
CVE-2019-0648 An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which…
Description
An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data.To exploit the vulnerability, an attacker must know the memory address of where the object was created.The update addresses the vulnerability by changing the way certain functions handle objects in memory, aka Scripting Engine Information Disclosure Vulnerability. This CVE ID is unique from CVE-2019-0658.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Edge | Versions not published |
References
- 106885 www.securityfocus.com
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Edge
The 186 CVEs of Microsoft Edge →
CVE-2023-28284
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
4.3
Medium
CVE-2019-1107
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in…
Not rated
CVE-2019-1106
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in…
Not rated
CVE-2019-1104
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft…
Not rated