CVE-2019-0539

🗓️ 08 Jan 2019 21:00:00Reported by microsoftType

Remote code execution vulnerability in Chakra scripting engine in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability.

Reporter	Title	Published	Views	Family All 41
0day.today	Microsoft Edge Chakra - NewScObjectNoCtor or InitProto Type Confusion Exploit	20 Jan 201900:00	–	zdt
0day.today	Microsoft Edge Chakra - InitClass Type Confusion Exploit	20 Jan 201900:00	–	zdt
0day.today	Microsoft Edge Chakra 1.11.4 - Read Permission via Type Confusion	4 Mar 201900:00	–	zdt
Gitee	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	27 Jul 202503:47	–	gitee
Circl	CVE-2019-0539	9 Jan 201914:53	–	circl
CNVD	Microsoft Chakra Scripting Engine Remote Memory Corruption Vulnerability	9 Jan 201900:00	–	cnvd
Check Point Advisories	Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-0539)	8 Jan 201900:00	–	checkpoint_advisories
Cvelist	CVE-2019-0539	8 Jan 201921:00	–	cvelist
Exploit DB	Microsoft Edge Chakra 1.11.4 - Read Permission via Type Confusion	4 Mar 201900:00	–	exploitdb
exploitpack	Microsoft Edge Chakra 1.11.4 - Read Permission via Type Confusion	4 Mar 201900:00	–	exploitpack

NVD

Node

microsoft chakracoreMatch-

Node

microsoft edgeMatch-

AND

microsoft windows_10Match-

microsoft windows_10Match1607

microsoft windows_10Match1703

microsoft windows_10Match1709

microsoft windows_10Match1803

microsoft windows_10Match1809

microsoft windows_server_2016Match-

microsoft windows_server_2019Match-

[
  {
    "product": "Microsoft Edge",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Windows 10 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1607 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1607 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1703 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1703 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1709 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1709 for ARM64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1709 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1803 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1803 for ARM64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1803 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1809 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1809 for ARM64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows 10 Version 1809 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Windows Server 2016"
      },
      {
        "status": "affected",
        "version": "Windows Server 2019"
      }
    ]
  },
  {
    "product": "ChakraCore",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "ChakraCore"
      }
    ]
  }
]

Source	Link
exploit-db	www.exploit-db.com/exploits/46485/
exploit-db	www.exploit-db.com/exploits/46203/
exploit-db	www.exploit-db.com/exploits/46204/
securityfocus	www.securityfocus.com/bid/106401
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0539

21 Nov 2024 04:16Current

7.4High risk

Vulners AI Score7.4

CVSS 37.5

CVSS 27.6

EPSS0.9095

CWE-787