Not rated

CVE-2019-1366 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in…

Description

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1307, CVE-2019-1308, CVE-2019-1335.

Affected products and versions

Product	Affected versions	Fixed in
Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems	Versions not published
Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems	Versions not published
Microsoft Edge (EdgeHTML-based) on Windows Server 2016	Versions not published
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems	Versions not published
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems	Versions not published
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems	Versions not published
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems	Versions not published
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems	Versions not published
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems	Versions not published

Show the 12 other branches

Product	Affected versions	Fixed in
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems	Versions not published
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems	Versions not published
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems	Versions not published
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems	Versions not published
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems	Versions not published
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems	Versions not published
Microsoft Edge (EdgeHTML-based) on Windows Server 2019	Versions not published
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for ARM64-based Systems	Versions not published
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems	Versions not published
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems	Versions not published
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems	Versions not published
ChakraCore	Versions not published

References

portal.msrc.microsoft.com portal.msrc.microsoft.com

Timeline

Published October 10, 2019
Last modified August 4, 2024

The 22 CVEs of Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems →

CVE-2020-1433 An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory,… Not rated CVE-2020-1219 A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft… Not rated CVE-2020-1073 A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in… Not rated CVE-2020-1037 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in… 4.2 Medium

Track this CVE