Non notée
CVE-2019-0648 An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which…
Description
An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data.To exploit the vulnerability, an attacker must know the memory address of where the object was created.The update addresses the vulnerability by changing the way certain functions handle objects in memory, aka Scripting Engine Information Disclosure Vulnerability. This CVE ID is unique from CVE-2019-0658.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft Edge | Versions non publiées |
Références
- 106885 www.securityfocus.com
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Microsoft Edge
Les 186 CVE de Microsoft Edge →
CVE-2023-28284
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
4.3
Moyenne
CVE-2019-1107
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in…
Non notée
CVE-2019-1106
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in…
Non notée
CVE-2019-1104
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft…
Non notée