DATABASE RESOURCES PRICING ABOUT US

{"id": "KLA11478", "vendorId": null, "type": "kaspersky", "bulletinFamily": "info", "title": "KLA11478 Multiple vulnerabilities in Microsoft Browsers", "description": "### *Detect date*:\n05/14/2019\n\n### *Severity*:\nCritical\n\n### *Description*:\nMultiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions, gain privileges, obtain sensitive information.\n\n### *Affected products*:\nInternet Explorer 11 \nInternet Explorer 10 \nInternet Explorer 9 \nMicrosoft Edge\n\n### *Solution*:\nInstall necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)\n\n### *Original advisories*:\n[CVE-2019-0940](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0940>) \n[CVE-2019-0937](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0937>) \n[CVE-2019-0924](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0924>) \n[CVE-2019-0913](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0913>) \n[CVE-2019-0921](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0921>) \n[CVE-2019-0995](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0995>) \n[CVE-2019-0918](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0918>) \n[CVE-2019-0923](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0923>) \n[CVE-2019-0912](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0912>) \n[CVE-2019-0929](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0929>) \n[CVE-2019-0925](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0925>) \n[CVE-2019-0915](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0915>) \n[CVE-2019-0927](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0927>) \n[CVE-2019-0933](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0933>) \n[CVE-2019-0916](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0916>) \n[CVE-2019-0938](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0938>) \n[CVE-2019-0926](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0926>) \n[CVE-2019-0914](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0914>) \n[CVE-2019-0911](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0911>) \n[CVE-2019-0884](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0884>) \n[CVE-2019-0930](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0930>) \n[CVE-2019-0917](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0917>) \n[CVE-2019-0922](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0922>) \n\n\n### *Impacts*:\nACE \n\n### *Related products*:\n[Microsoft Internet Explorer](<https://threats.kaspersky.com/en/product/Microsoft-Internet-Explorer/>)\n\n### *CVE-IDS*:\n[CVE-2019-0940](<https://vulners.com/cve/CVE-2019-0940>)7.6Critical \n[CVE-2019-0937](<https://vulners.com/cve/CVE-2019-0937>)7.6Critical \n[CVE-2019-0924](<https://vulners.com/cve/CVE-2019-0924>)7.6Critical \n[CVE-2019-0913](<https://vulners.com/cve/CVE-2019-0913>)7.6Critical \n[CVE-2019-0921](<https://vulners.com/cve/CVE-2019-0921>)4.3Warning \n[CVE-2019-0995](<https://vulners.com/cve/CVE-2019-0995>)6.8High \n[CVE-2019-0918](<https://vulners.com/cve/CVE-2019-0918>)7.6Critical \n[CVE-2019-0923](<https://vulners.com/cve/CVE-2019-0923>)7.6Critical \n[CVE-2019-0912](<https://vulners.com/cve/CVE-2019-0912>)7.6Critical \n[CVE-2019-0929](<https://vulners.com/cve/CVE-2019-0929>)7.6Critical \n[CVE-2019-0925](<https://vulners.com/cve/CVE-2019-0925>)7.6Critical \n[CVE-2019-0915](<https://vulners.com/cve/CVE-2019-0915>)7.6Critical \n[CVE-2019-0927](<https://vulners.com/cve/CVE-2019-0927>)7.6Critical \n[CVE-2019-0933](<https://vulners.com/cve/CVE-2019-0933>)7.6Critical \n[CVE-2019-0916](<https://vulners.com/cve/CVE-2019-0916>)7.6Critical \n[CVE-2019-0938](<https://vulners.com/cve/CVE-2019-0938>)6.8High \n[CVE-2019-0926](<https://vulners.com/cve/CVE-2019-0926>)7.6Critical \n[CVE-2019-0914](<https://vulners.com/cve/CVE-2019-0914>)7.6Critical \n[CVE-2019-0911](<https://vulners.com/cve/CVE-2019-0911>)7.6Critical \n[CVE-2019-0884](<https://vulners.com/cve/CVE-2019-0884>)7.6Critical \n[CVE-2019-0930](<https://vulners.com/cve/CVE-2019-0930>)4.3Warning \n[CVE-2019-0917](<https://vulners.com/cve/CVE-2019-0917>)7.6Critical \n[CVE-2019-0922](<https://vulners.com/cve/CVE-2019-0922>)7.6Critical\n\n### *KB list*:\n[4499179](<http://support.microsoft.com/kb/4499179>) \n[4499181](<http://support.microsoft.com/kb/4499181>) \n[4499164](<http://support.microsoft.com/kb/4499164>) \n[4499171](<http://support.microsoft.com/kb/4499171>) \n[4499167](<http://support.microsoft.com/kb/4499167>) \n[4494441](<http://support.microsoft.com/kb/4494441>) \n[4497936](<http://support.microsoft.com/kb/4497936>) \n[4499151](<http://support.microsoft.com/kb/4499151>) \n[4494440](<http://support.microsoft.com/kb/4494440>) \n[4499154](<http://support.microsoft.com/kb/4499154>) \n[4498206](<http://support.microsoft.com/kb/4498206>)\n\n### *Microsoft official advisories*:", "published": "2019-05-14T00:00:00", "modified": "2020-06-03T00:00:00", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}, "cvss2": {"cvssV2": {"version": "2.0", "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "HIGH", "authentication": "NONE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 7.6}, "severity": "HIGH", "exploitabilityScore": 4.9, "impactScore": 10.0, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}, "cvss3": {"cvssV3": {"version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 9.0, "baseSeverity": "CRITICAL"}, "exploitabilityScore": 2.2, "impactScore": 6.0}, "href": "https://threats.kaspersky.com/en/vulnerability/KLA11478/", "reporter": "Kaspersky Lab", "references": ["https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0940", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0937", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0924", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0913", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0921", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0995", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0918", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0923", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0912", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0929", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0925", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0915", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0927", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0933", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0916", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0938", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0926", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0914", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0911", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0884", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0930", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0917", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0922", "https://threats.kaspersky.com/en/product/Microsoft-Internet-Explorer/", "https://threats.kaspersky.com/en/product/Microsoft-Edge/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0940", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0937", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0924", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0913", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0921", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0995", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0918", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0923", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0912", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0929", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0925", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0915", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0927", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0933", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0916", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0938", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0926", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0914", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0911", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0884", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0930", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0917", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0922", "http://support.microsoft.com/kb/4499179", "http://support.microsoft.com/kb/4499181", "http://support.microsoft.com/kb/4499164", "http://support.microsoft.com/kb/4499171", "http://support.microsoft.com/kb/4499167", "http://support.microsoft.com/kb/4494441", "http://support.microsoft.com/kb/4497936", "http://support.microsoft.com/kb/4499151", "http://support.microsoft.com/kb/4494440", "http://support.microsoft.com/kb/4499154", "http://support.microsoft.com/kb/4498206", "https://portal.msrc.microsoft.com/en-us/security-guidance", "https://statistics.securelist.com/vulnerability-scan/month"], "cvelist": ["CVE-2019-0884", "CVE-2019-0911", "CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0918", "CVE-2019-0921", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0926", "CVE-2019-0927", "CVE-2019-0929", "CVE-2019-0930", "CVE-2019-0933", "CVE-2019-0937", "CVE-2019-0938", "CVE-2019-0940", "CVE-2019-0995"], "immutableFields": [], "lastseen": "2023-02-08T15:58:40", "viewCount": 9, "enchantments": {"dependencies": {"references": [{"type": "checkpoint_advisories", "idList": ["CPAI-2019-0577", "CPAI-2019-0578", "CPAI-2019-0579", "CPAI-2019-0580", "CPAI-2019-0581", "CPAI-2019-0586", "CPAI-2019-0588"]}, {"type": "cve", "idList": ["CVE-2019-0884", "CVE-2019-0911", "CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0918", "CVE-2019-0921", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0926", "CVE-2019-0927", "CVE-2019-0929", "CVE-2019-0930", "CVE-2019-0933", "CVE-2019-0937", "CVE-2019-0938", "CVE-2019-0940", "CVE-2019-0995"]}, {"type": "github", "idList": ["GHSA-37PF-W9FF-GQVM", "GHSA-59CJ-99CW-RQ64", "GHSA-5RQ8-3WVF-WRFG", "GHSA-7423-5QFM-G648", "GHSA-8GVG-8VHF-H26G", "GHSA-9735-P6R2-2HGH", "GHSA-FM9P-5M9F-RQ85", "GHSA-H23M-W6X5-JWR4", "GHSA-H6WF-HVWC-FM77", "GHSA-HRMM-F4J8-8VXC", "GHSA-PRXJ-C66C-4GCF", "GHSA-RX34-JFF5-PH35", "GHSA-V648-P92F-9996", "GHSA-W89R-QCH4-8JV5"]}, {"type": "kaspersky", "idList": ["KLA11706"]}, {"type": "mscve", "idList": ["MS:CVE-2019-0884", "MS:CVE-2019-0911", "MS:CVE-2019-0912", "MS:CVE-2019-0913", "MS:CVE-2019-0914", "MS:CVE-2019-0915", "MS:CVE-2019-0916", "MS:CVE-2019-0917", "MS:CVE-2019-0918", "MS:CVE-2019-0921", "MS:CVE-2019-0922", "MS:CVE-2019-0923", "MS:CVE-2019-0924", "MS:CVE-2019-0925", "MS:CVE-2019-0926", "MS:CVE-2019-0927", "MS:CVE-2019-0929", "MS:CVE-2019-0930", "MS:CVE-2019-0933", "MS:CVE-2019-0937", "MS:CVE-2019-0938", "MS:CVE-2019-0940", "MS:CVE-2019-0995"]}, {"type": "mskb", "idList": ["KB4494440", "KB4494441", "KB4497936", "KB4498206", "KB4499154", "KB4499167", "KB4499179", "KB4499181"]}, {"type": "nessus", "idList": ["SMB_NT_MS19_MAY_4494440.NASL", "SMB_NT_MS19_MAY_4494441.NASL", "SMB_NT_MS19_MAY_4499149.NASL", "SMB_NT_MS19_MAY_4499151.NASL", "SMB_NT_MS19_MAY_4499154.NASL", "SMB_NT_MS19_MAY_4499164.NASL", "SMB_NT_MS19_MAY_4499171.NASL", "SMB_NT_MS19_MAY_4499179.NASL", "SMB_NT_MS19_MAY_4499181.NASL", "SMB_NT_MS19_MAY_INTERNET_EXPLORER.NASL"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310815045", "OPENVAS:1361412562310815046", "OPENVAS:1361412562310815047", "OPENVAS:1361412562310815048", "OPENVAS:1361412562310815049", "OPENVAS:1361412562310815050", "OPENVAS:1361412562310815051", "OPENVAS:1361412562310815052", "OPENVAS:1361412562310815054"]}, {"type": "osv", "idList": ["OSV:GHSA-37PF-W9FF-GQVM", "OSV:GHSA-59CJ-99CW-RQ64", "OSV:GHSA-5RQ8-3WVF-WRFG", "OSV:GHSA-7423-5QFM-G648", "OSV:GHSA-8GVG-8VHF-H26G", "OSV:GHSA-9735-P6R2-2HGH", "OSV:GHSA-FM9P-5M9F-RQ85", "OSV:GHSA-H23M-W6X5-JWR4", "OSV:GHSA-H6WF-HVWC-FM77", "OSV:GHSA-HRMM-F4J8-8VXC", "OSV:GHSA-PRXJ-C66C-4GCF", "OSV:GHSA-RX34-JFF5-PH35", "OSV:GHSA-V648-P92F-9996", "OSV:GHSA-W89R-QCH4-8JV5"]}, {"type": "symantec", "idList": ["SMNTC-108229", "SMNTC-108233", "SMNTC-108235", "SMNTC-108236", "SMNTC-108237", "SMNTC-108238", "SMNTC-108242", "SMNTC-108244", "SMNTC-108246", "SMNTC-108248", "SMNTC-108250", "SMNTC-108251", "SMNTC-108253", "SMNTC-108254", "SMNTC-108257", "SMNTC-108258", "SMNTC-108259", "SMNTC-108275", "SMNTC-108276", "SMNTC-108278", "SMNTC-108310"]}, {"type": "talosblog", "idList": ["TALOSBLOG:71D138211697B43CB345A133B54BC824"]}, {"type": "zdi", "idList": ["ZDI-19-469", "ZDI-19-470", "ZDI-19-471"]}]}, "score": {"value": 2.9, "vector": "NONE"}, "backreferences": {"references": [{"type": "checkpoint_advisories", "idList": ["CPAI-2019-0577", "CPAI-2019-0578", "CPAI-2019-0579", "CPAI-2019-0580", "CPAI-2019-0581", "CPAI-2019-0586", "CPAI-2019-0588"]}, {"type": "cve", "idList": ["CVE-2019-0884", "CVE-2019-0911", "CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0918", "CVE-2019-0921", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0926", "CVE-2019-0927", "CVE-2019-0929", "CVE-2019-0930", "CVE-2019-0933", "CVE-2019-0937", "CVE-2019-0938", "CVE-2019-0940", "CVE-2019-0995"]}, {"type": "github", "idList": ["GHSA-37PF-W9FF-GQVM", "GHSA-59CJ-99CW-RQ64", "GHSA-5RQ8-3WVF-WRFG", "GHSA-7423-5QFM-G648", "GHSA-8GVG-8VHF-H26G", "GHSA-9735-P6R2-2HGH", "GHSA-FM9P-5M9F-RQ85", "GHSA-H23M-W6X5-JWR4", "GHSA-H6WF-HVWC-FM77", "GHSA-HRMM-F4J8-8VXC", "GHSA-PRXJ-C66C-4GCF", "GHSA-RX34-JFF5-PH35", "GHSA-V648-P92F-9996", "GHSA-W89R-QCH4-8JV5"]}, {"type": "kaspersky", "idList": ["KLA11706"]}, {"type": "metasploit", "idList": ["MSF:ILITIES/MSFT-CVE-2019-0884/", "MSF:ILITIES/MSFT-CVE-2019-0916/", "MSF:ILITIES/MSFT-CVE-2019-0926/", "MSF:ILITIES/MSFT-CVE-2019-0930/", "MSF:ILITIES/MSFT-CVE-2019-0995/"]}, {"type": "mscve", "idList": ["MS:CVE-2019-0911", "MS:CVE-2019-0913", "MS:CVE-2019-0914", "MS:CVE-2019-0915", "MS:CVE-2019-0916", "MS:CVE-2019-0917", "MS:CVE-2019-0918", "MS:CVE-2019-0921", "MS:CVE-2019-0922", "MS:CVE-2019-0924", "MS:CVE-2019-0925", "MS:CVE-2019-0927", "MS:CVE-2019-0930", "MS:CVE-2019-0933", "MS:CVE-2019-0937", "MS:CVE-2019-0938", "MS:CVE-2019-0940", "MS:CVE-2019-0995"]}, {"type": "mskb", "idList": ["KB4497936"]}, {"type": "nessus", "idList": ["SMB_NT_MS19_MAY_4494440.NASL", "SMB_NT_MS19_MAY_4494441.NASL", "SMB_NT_MS19_MAY_4499151.NASL", "SMB_NT_MS19_MAY_4499154.NASL", "SMB_NT_MS19_MAY_4499171.NASL", "SMB_NT_MS19_MAY_4499179.NASL", "SMB_NT_MS19_MAY_4499181.NASL"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310815045", "OPENVAS:1361412562310815046", "OPENVAS:1361412562310815047", "OPENVAS:1361412562310815048", "OPENVAS:1361412562310815049", "OPENVAS:1361412562310815050", "OPENVAS:1361412562310815051", "OPENVAS:1361412562310815052", "OPENVAS:1361412562310815054"]}, {"type": "symantec", "idList": ["SMNTC-108310"]}, {"type": "talosblog", "idList": ["TALOSBLOG:71D138211697B43CB345A133B54BC824"]}, {"type": "zdi", "idList": ["ZDI-19-469", "ZDI-19-470", "ZDI-19-471"]}]}, "exploitation": null, "epss": [{"cve": "CVE-2019-0884", "epss": "0.022770000", "percentile": "0.879100000", "modified": "2023-03-16"}, {"cve": "CVE-2019-0911", "epss": "0.022770000", "percentile": "0.879100000", "modified": "2023-03-16"}, {"cve": "CVE-2019-0912", "epss": "0.027460000", "percentile": "0.889070000", "modified": "2023-03-16"}, {"cve": "CVE-2019-0913", "epss": "0.027460000", "percentile": "0.889070000", "modified": "2023-03-16"}, {"cve": "CVE-2019-0914", "epss": "0.027460000", "percentile": "0.889070000", "modified": "2023-03-16"}, {"cve": "CVE-2019-0915", "epss": "0.027460000", "percentile": "0.889070000", "modified": "2023-03-16"}, {"cve": "CVE-2019-0916", "epss": "0.027460000", "percentile": "0.889070000", "modified": "2023-03-16"}, {"cve": "CVE-2019-0917", "epss": "0.027460000", "percentile": "0.889070000", "modified": "2023-03-16"}, {"cve": "CVE-2019-0918", "epss": "0.022770000", "percentile": "0.879100000", "modified": "2023-03-16"}, {"cve": "CVE-2019-0921", "epss": "0.001740000", "percentile": "0.527650000", "modified": "2023-03-16"}, {"cve": "CVE-2019-0922", "epss": "0.027460000", "percentile": "0.889070000", "modified": "2023-03-16"}, {"cve": "CVE-2019-0923", "epss": "0.027460000", "percentile": "0.889070000", "modified": "2023-03-16"}, {"cve": "CVE-2019-0924", "epss": "0.027460000", "percentile": "0.889070000", "modified": "2023-03-16"}, {"cve": "CVE-2019-0925", "epss": "0.027460000", "percentile": "0.889070000", "modified": "2023-03-16"}, {"cve": "CVE-2019-0926", "epss": "0.027460000", "percentile": "0.889070000", "modified": "2023-03-16"}, {"cve": "CVE-2019-0927", "epss": "0.027460000", "percentile": "0.889070000", "modified": "2023-03-16"}, {"cve": "CVE-2019-0929", "epss": "0.027460000", "percentile": "0.889070000", "modified": "2023-03-16"}, {"cve": "CVE-2019-0930", "epss": "0.193830000", "percentile": "0.954660000", "modified": "2023-03-16"}, {"cve": "CVE-2019-0933", "epss": "0.027460000", "percentile": "0.889070000", "modified": "2023-03-16"}, {"cve": "CVE-2019-0937", "epss": "0.064770000", "percentile": "0.925690000", "modified": "2023-03-16"}, {"cve": "CVE-2019-0938", "epss": "0.008860000", "percentile": "0.801020000", "modified": "2023-03-16"}, {"cve": "CVE-2019-0940", "epss": "0.241120000", "percentile": "0.958340000", "modified": "2023-03-16"}, {"cve": "CVE-2019-0995", "epss": "0.002920000", "percentile": "0.642900000", "modified": "2023-03-16"}], "vulnersScore": 2.9}, "_state": {"dependencies": 1675872124, "score": 1675872308, "epss": 1679004379}, "_internal": {"score_hash": "e8c7e10147a28c3fddd58a1b9231c74d"}}

{"cve": [{"lastseen": "2023-02-09T14:23:31", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-16T19:29:00", "type": "cve", "title": "CVE-2019-0914", "cwe": ["CWE-787"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2020-08-24T17:37:00", "cpe": ["cpe:/a:microsoft:edge:-"], "id": "CVE-2019-0914", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0914", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*"]}, {"lastseen": "2023-02-09T14:23:32", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-16T19:29:00", "type": "cve", "title": "CVE-2019-0917", "cwe": ["CWE-787"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2020-08-24T17:37:00", "cpe": ["cpe:/a:microsoft:edge:-"], "id": "CVE-2019-0917", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0917", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*"]}, {"lastseen": "2023-02-09T14:23:35", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-16T19:29:00", "type": "cve", "title": "CVE-2019-0916", "cwe": ["CWE-787"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2020-08-24T17:37:00", "cpe": ["cpe:/a:microsoft:edge:-"], "id": "CVE-2019-0916", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0916", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*"]}, {"lastseen": "2023-02-09T14:23:31", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-16T19:29:00", "type": "cve", "title": "CVE-2019-0912", "cwe": ["CWE-787"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2020-08-24T17:37:00", "cpe": ["cpe:/a:microsoft:edge:-"], "id": "CVE-2019-0912", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0912", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*"]}, {"lastseen": "2023-02-09T14:23:34", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-16T19:29:00", "type": "cve", "title": "CVE-2019-0924", "cwe": ["CWE-787"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2020-08-24T17:37:00", "cpe": ["cpe:/a:microsoft:edge:-"], "id": "CVE-2019-0924", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0924", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*"]}, {"lastseen": "2023-02-09T14:23:34", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-16T19:29:00", "type": "cve", "title": "CVE-2019-0927", "cwe": ["CWE-787"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2020-08-24T17:37:00", "cpe": ["cpe:/a:microsoft:edge:-"], "id": "CVE-2019-0927", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0927", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*"]}, {"lastseen": "2023-02-09T14:23:36", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-16T19:29:00", "type": "cve", "title": "CVE-2019-0933", "cwe": ["CWE-787"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2020-08-24T17:37:00", "cpe": ["cpe:/a:microsoft:edge:-"], "id": "CVE-2019-0933", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0933", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*"]}, {"lastseen": "2023-02-09T14:23:35", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-16T19:29:00", "type": "cve", "title": "CVE-2019-0915", "cwe": ["CWE-787"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2020-08-24T17:37:00", "cpe": ["cpe:/a:microsoft:edge:-"], "id": "CVE-2019-0915", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0915", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*"]}, {"lastseen": "2023-02-09T14:23:33", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-16T19:29:00", "type": "cve", "title": "CVE-2019-0925", "cwe": ["CWE-787"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2020-08-24T17:37:00", "cpe": ["cpe:/a:microsoft:edge:-"], "id": "CVE-2019-0925", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0925", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*"]}, {"lastseen": "2023-02-09T14:23:33", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-16T19:29:00", "type": "cve", "title": "CVE-2019-0922", "cwe": ["CWE-787"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2020-08-24T17:37:00", "cpe": ["cpe:/a:microsoft:edge:-"], "id": "CVE-2019-0922", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0922", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*"]}, {"lastseen": "2023-02-09T14:23:33", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-16T19:29:00", "type": "cve", "title": "CVE-2019-0923", "cwe": ["CWE-787"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2020-08-24T17:37:00", "cpe": ["cpe:/a:microsoft:edge:-"], "id": "CVE-2019-0923", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0923", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*"]}, {"lastseen": "2023-02-09T14:23:31", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-16T19:29:00", "type": "cve", "title": "CVE-2019-0913", "cwe": ["CWE-787"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2020-08-24T17:37:00", "cpe": ["cpe:/a:microsoft:edge:-"], "id": "CVE-2019-0913", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0913", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*"]}, {"lastseen": "2023-02-09T14:23:35", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-16T19:29:00", "type": "cve", "title": "CVE-2019-0937", "cwe": ["CWE-787"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2020-08-24T17:37:00", "cpe": ["cpe:/a:microsoft:edge:-"], "id": "CVE-2019-0937", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0937", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*"]}, {"lastseen": "2023-02-09T14:23:32", "description": "A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0884, CVE-2019-0911.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-16T19:29:00", "type": "cve", "title": "CVE-2019-0918", "cwe": ["CWE-787"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0884", "CVE-2019-0911", "CVE-2019-0918"], "modified": "2020-08-24T17:37:00", "cpe": ["cpe:/a:microsoft:internet_explorer:10", "cpe:/a:microsoft:internet_explorer:11", "cpe:/a:microsoft:internet_explorer:9"], "id": "CVE-2019-0918", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0918", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*", "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*", "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*"]}, {"lastseen": "2023-02-09T14:23:27", "description": "A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0911, CVE-2019-0918.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-16T19:29:00", "type": "cve", "title": "CVE-2019-0884", "cwe": ["CWE-787"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0884", "CVE-2019-0911", "CVE-2019-0918"], "modified": "2020-08-24T17:37:00", "cpe": ["cpe:/a:microsoft:internet_explorer:10", "cpe:/a:microsoft:edge:-", "cpe:/a:microsoft:internet_explorer:11", "cpe:/a:microsoft:internet_explorer:9"], "id": "CVE-2019-0884", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0884", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*", "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*", "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*", "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*"]}, {"lastseen": "2023-02-09T14:23:31", "description": "A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0884, CVE-2019-0918.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-16T19:29:00", "type": "cve", "title": "CVE-2019-0911", "cwe": ["CWE-787"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0884", "CVE-2019-0911", "CVE-2019-0918"], "modified": "2020-08-24T17:37:00", "cpe": ["cpe:/a:microsoft:internet_explorer:10", "cpe:/a:microsoft:edge:-", "cpe:/a:microsoft:internet_explorer:11"], "id": "CVE-2019-0911", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0911", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*", "cpe:2.3:a:microsoft:internet_explorer:10:-:*:*:*:*:*:*", "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*"]}, {"lastseen": "2023-02-09T14:23:33", "description": "An spoofing vulnerability exists when Internet Explorer improperly handles URLs, aka 'Internet Explorer Spoofing Vulnerability'.", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 6.5, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 3.6}, "published": "2019-05-16T19:29:00", "type": "cve", "title": "CVE-2019-0921", "cwe": ["NVD-CWE-noinfo"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "NONE", "availabilityImpact": "NONE", "integrityImpact": "PARTIAL", "baseScore": 4.3, "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 2.9, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0921"], "modified": "2020-08-24T17:37:00", "cpe": ["cpe:/a:microsoft:internet_explorer:10", "cpe:/a:microsoft:internet_explorer:11", "cpe:/a:microsoft:internet_explorer:9"], "id": "CVE-2019-0921", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0921", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}, "cpe23": ["cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*", "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*", "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*"]}, {"lastseen": "2023-02-09T14:23:38", "description": "A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability'.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-16T19:29:00", "type": "cve", "title": "CVE-2019-0940", "cwe": ["CWE-787"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0940"], "modified": "2020-08-24T17:37:00", "cpe": ["cpe:/a:microsoft:internet_explorer:10", "cpe:/a:microsoft:edge:-", "cpe:/a:microsoft:internet_explorer:11"], "id": "CVE-2019-0940", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0940", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*", "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*", "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*"]}, {"lastseen": "2023-02-09T14:23:34", "description": "A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-16T19:29:00", "type": "cve", "title": "CVE-2019-0929", "cwe": ["CWE-787"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0929"], "modified": "2020-08-24T17:37:00", "cpe": ["cpe:/a:microsoft:internet_explorer:11"], "id": "CVE-2019-0929", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0929", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*"]}, {"lastseen": "2023-02-09T14:23:36", "description": "An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka 'Microsoft Edge Elevation of Privilege Vulnerability'.", "cvss3": {"exploitabilityScore": 2.2, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "CHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.0, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 6.0}, "published": "2019-05-16T19:29:00", "type": "cve", "title": "CVE-2019-0938", "cwe": ["NVD-CWE-noinfo"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0938"], "modified": "2020-08-24T17:37:00", "cpe": ["cpe:/a:microsoft:edge:-"], "id": "CVE-2019-0938", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0938", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*"]}, {"lastseen": "2023-02-09T14:23:34", "description": "A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-16T19:29:00", "type": "cve", "title": "CVE-2019-0926", "cwe": ["CWE-787"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0926"], "modified": "2020-08-24T17:37:00", "cpe": ["cpe:/a:microsoft:edge:-"], "id": "CVE-2019-0926", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0926", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*"]}, {"lastseen": "2023-02-09T14:23:34", "description": "An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory, aka 'Internet Explorer Information Disclosure Vulnerability'.", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "baseScore": 6.5, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 3.6}, "published": "2019-05-16T19:29:00", "type": "cve", "title": "CVE-2019-0930", "cwe": ["NVD-CWE-noinfo"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "NONE", "integrityImpact": "NONE", "baseScore": 4.3, "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 2.9, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0930"], "modified": "2020-08-24T17:37:00", "cpe": ["cpe:/a:microsoft:internet_explorer:10", "cpe:/a:microsoft:internet_explorer:11", "cpe:/a:microsoft:internet_explorer:9"], "id": "CVE-2019-0930", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0930", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:P/I:N/A:N"}, "cpe23": ["cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*", "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*", "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*"]}, {"lastseen": "2023-02-09T14:23:45", "description": "A security feature bypass vulnerability exists when urlmon.dll improperly handles certain Mark of the Web queries, aka 'Internet Explorer Security Feature Bypass Vulnerability'.", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 8.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-16T19:29:00", "type": "cve", "title": "CVE-2019-0995", "cwe": ["NVD-CWE-noinfo"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0995"], "modified": "2020-08-24T17:37:00", "cpe": ["cpe:/a:microsoft:internet_explorer:11"], "id": "CVE-2019-0995", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0995", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*"]}], "github": [{"lastseen": "2023-02-01T05:08:15", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T21:00:09", "type": "github", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-02-01T05:05:09", "id": "GHSA-7423-5QFM-G648", "href": "https://github.com/advisories/GHSA-7423-5qfm-g648", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-02-01T05:08:15", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T21:00:12", "type": "github", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-02-01T05:05:18", "id": "GHSA-PRXJ-C66C-4GCF", "href": "https://github.com/advisories/GHSA-prxj-c66c-4gcf", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-02-01T05:08:15", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T21:00:11", "type": "github", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-02-01T05:05:09", "id": "GHSA-HRMM-F4J8-8VXC", "href": "https://github.com/advisories/GHSA-hrmm-f4j8-8vxc", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-02-01T05:08:15", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T21:00:06", "type": "github", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-02-01T05:05:08", "id": "GHSA-RX34-JFF5-PH35", "href": "https://github.com/advisories/GHSA-rx34-jff5-ph35", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-02-01T05:08:15", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T21:00:08", "type": "github", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-02-01T05:05:13", "id": "GHSA-H23M-W6X5-JWR4", "href": "https://github.com/advisories/GHSA-h23m-w6x5-jwr4", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-02-01T05:08:15", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T20:59:59", "type": "github", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-02-01T05:05:10", "id": "GHSA-W89R-QCH4-8JV5", "href": "https://github.com/advisories/GHSA-w89r-qch4-8jv5", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-02-01T05:08:15", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T21:00:02", "type": "github", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-02-01T05:05:10", "id": "GHSA-H6WF-HVWC-FM77", "href": "https://github.com/advisories/GHSA-h6wf-hvwc-fm77", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-02-01T05:08:15", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T21:00:05", "type": "github", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-02-01T05:05:08", "id": "GHSA-59CJ-99CW-RQ64", "href": "https://github.com/advisories/GHSA-59cj-99cw-rq64", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-02-01T05:08:15", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T21:00:03", "type": "github", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-02-01T05:05:08", "id": "GHSA-FM9P-5M9F-RQ85", "href": "https://github.com/advisories/GHSA-fm9p-5m9f-rq85", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-02-01T05:08:15", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T20:59:01", "type": "github", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-02-01T05:05:09", "id": "GHSA-5RQ8-3WVF-WRFG", "href": "https://github.com/advisories/GHSA-5rq8-3wvf-wrfg", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-02-01T05:08:15", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T20:59:03", "type": "github", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-02-01T05:05:10", "id": "GHSA-8GVG-8VHF-H26G", "href": "https://github.com/advisories/GHSA-8gvg-8vhf-h26g", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-02-01T05:08:15", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T20:58:59", "type": "github", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-02-01T05:05:18", "id": "GHSA-37PF-W9FF-GQVM", "href": "https://github.com/advisories/GHSA-37pf-w9ff-gqvm", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-02-01T05:08:15", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T20:57:39", "type": "github", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-02-01T05:05:09", "id": "GHSA-V648-P92F-9996", "href": "https://github.com/advisories/GHSA-v648-p92f-9996", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-02-01T05:08:15", "description": "A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0884, CVE-2019-0918.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T21:00:00", "type": "github", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0884", "CVE-2019-0911", "CVE-2019-0918"], "modified": "2023-02-01T05:05:17", "id": "GHSA-9735-P6R2-2HGH", "href": "https://github.com/advisories/GHSA-9735-p6r2-2hgh", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}], "osv": [{"lastseen": "2023-03-12T05:34:44", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T21:00:11", "type": "osv", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-03-12T05:34:43", "id": "OSV:GHSA-HRMM-F4J8-8VXC", "href": "https://osv.dev/vulnerability/GHSA-hrmm-f4j8-8vxc", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-12T05:31:07", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T20:59:01", "type": "osv", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-03-12T05:31:05", "id": "OSV:GHSA-5RQ8-3WVF-WRFG", "href": "https://osv.dev/vulnerability/GHSA-5rq8-3wvf-wrfg", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-12T05:31:44", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T21:00:06", "type": "osv", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-03-12T05:31:42", "id": "OSV:GHSA-RX34-JFF5-PH35", "href": "https://osv.dev/vulnerability/GHSA-rx34-jff5-ph35", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-12T05:34:54", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T21:00:03", "type": "osv", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-03-12T05:34:49", "id": "OSV:GHSA-FM9P-5M9F-RQ85", "href": "https://osv.dev/vulnerability/GHSA-fm9p-5m9f-rq85", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-12T05:31:10", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T21:00:05", "type": "osv", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-03-12T05:31:07", "id": "OSV:GHSA-59CJ-99CW-RQ64", "href": "https://osv.dev/vulnerability/GHSA-59cj-99cw-rq64", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-12T05:27:19", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T20:57:39", "type": "osv", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-03-12T05:27:15", "id": "OSV:GHSA-V648-P92F-9996", "href": "https://osv.dev/vulnerability/GHSA-v648-p92f-9996", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-12T05:24:12", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T20:58:59", "type": "osv", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-03-12T05:24:05", "id": "OSV:GHSA-37PF-W9FF-GQVM", "href": "https://osv.dev/vulnerability/GHSA-37pf-w9ff-gqvm", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-12T05:27:06", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T21:00:12", "type": "osv", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-03-12T05:27:04", "id": "OSV:GHSA-PRXJ-C66C-4GCF", "href": "https://osv.dev/vulnerability/GHSA-prxj-c66c-4gcf", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-12T05:35:01", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T20:59:59", "type": "osv", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-03-12T05:34:56", "id": "OSV:GHSA-W89R-QCH4-8JV5", "href": "https://osv.dev/vulnerability/GHSA-w89r-qch4-8jv5", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-12T05:34:53", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T20:59:03", "type": "osv", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-03-12T05:34:51", "id": "OSV:GHSA-8GVG-8VHF-H26G", "href": "https://osv.dev/vulnerability/GHSA-8gvg-8vhf-h26g", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-12T05:30:28", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T21:00:02", "type": "osv", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-03-12T05:30:27", "id": "OSV:GHSA-H6WF-HVWC-FM77", "href": "https://osv.dev/vulnerability/GHSA-h6wf-hvwc-fm77", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-12T05:32:51", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T21:00:09", "type": "osv", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-03-12T05:32:48", "id": "OSV:GHSA-7423-5QFM-G648", "href": "https://osv.dev/vulnerability/GHSA-7423-5qfm-g648", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-12T05:34:10", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T21:00:08", "type": "osv", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0933", "CVE-2019-0937"], "modified": "2023-03-12T05:34:07", "id": "OSV:GHSA-H23M-W6X5-JWR4", "href": "https://osv.dev/vulnerability/GHSA-h23m-w6x5-jwr4", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-12T05:33:52", "description": "A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0884, CVE-2019-0918.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2021-03-29T21:00:00", "type": "osv", "title": "Out-of-bounds write", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0884", "CVE-2019-0911", "CVE-2019-0918"], "modified": "2023-03-12T05:33:48", "id": "OSV:GHSA-9735-P6R2-2HGH", "href": "https://osv.dev/vulnerability/GHSA-9735-p6r2-2hgh", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}], "nessus": [{"lastseen": "2022-02-28T13:13:57", "description": "The Internet Explorer installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities :\n\n - An spoofing vulnerability exists when Internet Explorer improperly handles URLs. An attacker who successfully exploited this vulnerability could trick a user by redirecting the user to a specially crafted website. The specially crafted website could either spoof content or serve as a pivot to chain an attack with other vulnerabilities in web services. (CVE-2019-0921)\n\n - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. (CVE-2019-0940)\n\n - A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.\n (CVE-2019-0884, CVE-2019-0911, CVE-2019-0918)\n\n - An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.\n An attacker who successfully exploited the vulnerability could obtain information to further compromise the users system. (CVE-2019-0930)", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "nessus", "title": "Security Updates for Internet Explorer (May 2019)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2019-0884", "CVE-2019-0911", "CVE-2019-0918", "CVE-2019-0921", "CVE-2019-0930", "CVE-2019-0940"], "modified": "2019-10-30T00:00:00", "cpe": ["cpe:/o:microsoft:windows"], "id": "SMB_NT_MS19_MAY_INTERNET_EXPLORER.NASL", "href": "https://www.tenable.com/plugins/nessus/125069", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\n# The descriptive text and package checks in this plugin were \n# extracted from the Microsoft Security Updates API. The text\n# itself is copyright (C) Microsoft Corporation.\n#\n\ninclude('compat.inc');\n\nif (description)\n{\n script_id(125069);\n script_version(\"1.5\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2019/10/30\");\n\n script_cve_id(\n \"CVE-2019-0884\",\n \"CVE-2019-0911\",\n \"CVE-2019-0918\",\n \"CVE-2019-0921\",\n \"CVE-2019-0930\",\n \"CVE-2019-0940\"\n );\n script_xref(name:\"MSKB\", value:\"4498206\");\n script_xref(name:\"MSKB\", value:\"4499149\");\n script_xref(name:\"MSKB\", value:\"4499151\");\n script_xref(name:\"MSKB\", value:\"4499164\");\n script_xref(name:\"MSKB\", value:\"4499171\");\n script_xref(name:\"MSFT\", value:\"MS19-4498206\");\n script_xref(name:\"MSFT\", value:\"MS19-4499149\");\n script_xref(name:\"MSFT\", value:\"MS19-4499151\");\n script_xref(name:\"MSFT\", value:\"MS19-4499164\");\n script_xref(name:\"MSFT\", value:\"MS19-4499171\");\n\n script_name(english:\"Security Updates for Internet Explorer (May 2019)\");\n script_summary(english:\"Checks for Microsoft security updates.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The Internet Explorer installation on the remote host is affected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The Internet Explorer installation on the remote host is\nmissing security updates. It is, therefore, affected by\nmultiple vulnerabilities :\n\n - An spoofing vulnerability exists when Internet Explorer\n improperly handles URLs. An attacker who successfully\n exploited this vulnerability could trick a user by\n redirecting the user to a specially crafted website. The\n specially crafted website could either spoof content or\n serve as a pivot to chain an attack with other\n vulnerabilities in web services. (CVE-2019-0921)\n\n - A remote code execution vulnerability exists in the way\n that Microsoft browsers access objects in memory. The\n vulnerability could corrupt memory in a way that could\n allow an attacker to execute arbitrary code in the\n context of the current user. An attacker who\n successfully exploited the vulnerability could gain the\n same user rights as the current user. (CVE-2019-0940)\n\n - A remote code execution vulnerability exists in the way\n the scripting engine handles objects in memory in\n Microsoft browsers. The vulnerability could corrupt\n memory in such a way that an attacker could execute\n arbitrary code in the context of the current user. An\n attacker who successfully exploited the vulnerability\n could gain the same user rights as the current user.\n (CVE-2019-0884, CVE-2019-0911, CVE-2019-0918)\n\n - An information disclosure vulnerability exists when\n Internet Explorer improperly handles objects in memory.\n An attacker who successfully exploited the vulnerability\n could obtain information to further compromise the users\n system. (CVE-2019-0930)\");\n # https://support.microsoft.com/en-us/help/4499171/windows-server-2012-update-kb4499171\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?e0fcb7d5\");\n # https://support.microsoft.com/en-us/help/4498206/cumulative-security-update-for-internet-explorer-may-14-2019\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?44345f6d\");\n # https://support.microsoft.com/en-us/help/4499164/windows-7-update-kb4499164\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?283578f0\");\n # https://support.microsoft.com/en-us/help/4499151/windows-8-1-update-kb4499151\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?f1eae74c\");\n # https://support.microsoft.com/en-us/help/4499149/windows-server-2008-update-kb4499149\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?15faa0a8\");\n script_set_attribute(attribute:\"solution\", value:\n\"Microsoft has released the following security updates to address this issue: \n -KB4498206\n -KB4499149\n -KB4499151\n -KB4499164\n -KB4499171\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:H/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2019-0940\");\n\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2019/05/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2019/05/14\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2019/05/14\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:microsoft:windows\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows : Microsoft Bulletins\");\n\n script_copyright(english:\"This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"smb_check_rollup.nasl\", \"smb_hotfixes.nasl\", \"ms_bulletin_checks_possible.nasl\");\n script_require_keys(\"SMB/MS_Bulletin_Checks/Possible\");\n script_require_ports(139, 445, \"Host/patch_management_checks\");\n\n exit(0);\n}\n\n\n\ninclude(\"audit.inc\");\ninclude(\"smb_hotfixes_fcheck.inc\");\ninclude(\"smb_hotfixes.inc\");\ninclude(\"smb_func.inc\");\ninclude(\"misc_func.inc\");\n\nget_kb_item_or_exit(\"SMB/MS_Bulletin_Checks/Possible\");\n\nbulletin = 'MS19-05';\nkbs = make_list(\n '4499151',\n '4498206',\n '4499149',\n '4499164',\n '4499171'\n);\n\nif (get_kb_item(\"Host/patch_management_checks\")) hotfix_check_3rd_party(bulletin:bulletin, kbs:kbs, severity:SECURITY_HOLE);\n\nget_kb_item_or_exit(\"SMB/Registry/Enumerated\");\nos = get_kb_item_or_exit(\"SMB/WindowsVersion\", exit_code:1);\n\nif (hotfix_check_sp_range(vista:'2', win7:'1', win8:'0', win81:'0') <= 0) audit(AUDIT_OS_SP_NOT_VULN);\n\nproductname = get_kb_item_or_exit(\"SMB/ProductName\", exit_code:1);\nif (\"Windows 8\" >< productname && \"8.1\" >!< productname)\n audit(AUDIT_OS_SP_NOT_VULN);\nif (\"Vista\" >< productname) audit(AUDIT_OS_SP_NOT_VULN);\n\nif (hotfix_check_server_core() == 1) audit(AUDIT_WIN_SERVER_CORE);\n\nshare = hotfix_get_systemdrive(as_share:TRUE, exit_on_fail:TRUE);\nif (!is_accessible_share(share:share)) audit(AUDIT_SHARE_FAIL, share);\n\nif (\n # Windows 8.1 / Windows Server 2012 R2\n # Internet Explorer 11\n hotfix_is_vulnerable(os:\"6.3\", sp:0, file:\"mshtml.dll\", version:\"11.0.9600.19354\", min_version:\"11.0.9600.16000\", dir:\"\\system32\", bulletin:bulletin, kb:\"4498206\") ||\n\n # Windows Server 2012\n # Internet Explorer 10\n hotfix_is_vulnerable(os:\"6.2\", sp:0, file:\"mshtml.dll\", version:\"10.0.9200.22752\", min_version:\"10.0.9200.16000\", dir:\"\\system32\", bulletin:bulletin, kb:\"4498206\") ||\n # Internet Explorer 11\n hotfix_is_vulnerable(os:\"6.2\", sp:0, file:\"mshtml.dll\", version:\"11.0.9600.19354\", min_version:\"11.0.9600.16000\", dir:\"\\system32\", bulletin:bulletin, kb:\"4498206\") ||\n \n # Windows 7 / Server 2008 R2\n # Internet Explorer 11\n hotfix_is_vulnerable(os:\"6.1\", sp:1, file:\"mshtml.dll\", version:\"11.0.9600.19354\", min_version:\"11.0.9600.16000\", dir:\"\\system32\", bulletin:bulletin, kb:\"4498206\") ||\n\n # Windows Server 2008\n # Internet Explorer 9\n hotfix_is_vulnerable(os:\"6.0\", sp:2, file:\"mshtml.dll\", version:\"9.0.8112.21334\", min_version:\"9.0.8112.16000\", dir:\"\\system32\", bulletin:bulletin, kb:\"4498206\")\n)\n{\n report = '\\nNote: The fix for this issue is available in either of the following updates:\\n';\n report += ' - KB4498206 : Cumulative Security Update for Internet Explorer\\n';\n if(os == \"6.3\")\n {\n report += ' - KB4499151 : Windows 8.1 / Server 2012 R2 Monthly Rollup\\n';\n hotfix_add_report(bulletin:'MS19-05', kb:'4499151', report);\n }\n else if(os == \"6.2\")\n {\n report += ' - KB4499171 : Windows Server 2012 Monthly Rollup\\n';\n hotfix_add_report(bulletin:'MS19-05', kb:'4499171', report);\n }\n else if(os == \"6.1\")\n {\n report += ' - KB4499164 : Windows 7 / Server 2008 R2 Monthly Rollup\\n';\n hotfix_add_report(bulletin:'MS19-05', kb:'4499164', report);\n }\n else if(os == \"6.0\")\n {\n report += ' - KB4499149 : Windows Server 2008 Monthly Rollup\\n';\n hotfix_add_report(bulletin:'MS19-05', kb:'4499149', report);\n }\n set_kb_item(name:'SMB/Missing/'+bulletin, value:TRUE);\n hotfix_security_hole();\n hotfix_check_fversion_end();\n}\nelse\n{\n hotfix_check_fversion_end();\n audit(AUDIT_HOST_NOT, hotfix_get_audit_report());\n}\n", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2022-02-28T13:14:45", "description": "The remote Windows host is missing security update 4494441. It is, therefore, affected by multiple vulnerabilities :\n\n - A new subclass of speculative execution side channel vulnerabilities, known as Microarchitectural Data Sampling, exist in Windows.\n An attacker who successfully exploited these vulnerabilities may be able to read privileged data across trust boundaries. In shared resource environments (such as exists in some cloud services configurations), these vulnerabilities could allow one virtual machine to improperly access information from another. In non-browsing scenarios on standalone systems, an attacker would need prior access to the system or an ability to run a specially crafted application on the target system to leverage these vulnerabilities.\n (CVE-2019-11091, CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)\n\n - A security feature bypass vulnerability exists when urlmon.dll improperly handles certain Mark of the Web queries. The vulnerability allows Internet Explorer to bypass Mark of the Web warnings or restrictions for files downloaded or created in a specific way.\n (CVE-2019-0995)\n\n - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. (CVE-2019-0940)\n\n - A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory.\n The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. (CVE-2019-0926)\n\n - A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory. (CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895, CVE-2019-0896, CVE-2019-0897, CVE-2019-0898, CVE-2019-0899, CVE-2019-0900, CVE-2019-0901, CVE-2019-0902)\n\n - A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.\n The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. (CVE-2019-0929)\n\n - An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system. A locally authenticated attacker could exploit this vulnerability by running a specially crafted application. The security update addresses the vulnerability by helping to ensure that the Windows Kernel properly handles key enumeration. (CVE-2019-0881)\n\n - An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs;\n view, change, or delete data; or create new accounts with full user rights. (CVE-2019-0892)\n\n - A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. (CVE-2019-0903)\n\n - An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system. (CVE-2019-0886)\n\n - An elevation of privilege vulnerability exists in the Unified Write Filter (UWF) feature for Windows 10 when it improperly restricts access to the registry. An attacker who successfully exploited the vulnerability could make changes to the registry keys protected by UWF without having administrator privileges.\n (CVE-2019-0942)\n\n - A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement. An attacker who successfully exploited this vulnerability could circumvent Windows PowerShell Constrained Language Mode on the machine. (CVE-2019-0733)\n\n - An spoofing vulnerability exists when Internet Explorer improperly handles URLs. An attacker who successfully exploited this vulnerability could trick a user by redirecting the user to a specially crafted website. The specially crafted website could either spoof content or serve as a pivot to chain an attack with other vulnerabilities in web services. (CVE-2019-0921)\n\n - A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. (CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937)\n\n - An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations. (CVE-2019-0727)\n\n - An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully decode and replace authentication request using Kerberos, allowing an attacker to be validated as an Administrator. The update addresses this vulnerability by changing how these requests are validated. (CVE-2019-0734)\n\n - A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input. An attacker could exploit the vulnerability to execute malicious code. (CVE-2019-0885)\n\n - A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.\n (CVE-2019-0884, CVE-2019-0911, CVE-2019-0918)\n\n - An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with administrator privileges. (CVE-2019-0863)\n\n - An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.\n An attacker who successfully exploited the vulnerability could obtain information to further compromise the users system. (CVE-2019-0930)\n\n - A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to a .NET Framework (or .NET core) application. The update addresses the vulnerability by correcting how .NET Framework and .NET Core applications handle RegEx string processing. (CVE-2019-0820)\n\n - An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to properly handle certain symbolic links. An attacker who successfully exploited this vulnerability could potentially set certain items to run at a higher level and thereby elevate permissions. (CVE-2019-0936)\n\n - An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges on the victim system.\n (CVE-2019-0931)\n\n - A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could run arbitrary code on the DHCP server. (CVE-2019-0725)\n\n - A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. (CVE-2019-0864)\n\n - An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the users system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.\n The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory. (CVE-2019-0758, CVE-2019-0882, CVE-2019-0961)\n\n - An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser. An attacker who successfully exploited this vulnerability could gain elevated privileges and break out of the Edge AppContainer sandbox. The vulnerability by itself does not allow arbitrary code to run. However, this vulnerability could be used in conjunction with one or more vulnerabilities (for example a remote code execution vulnerability and another elevation of privilege vulnerability) to take advantage of the elevated privileges when running. The security update addresses the vulnerability by modifying how Microsoft Edge handles sandboxing. (CVE-2019-0938)\n\n - An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. (CVE-2019-0707)\n\n - A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests.\n An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Framework or .NET Core web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Framework or .NET Core application.\n The update addresses the vulnerability by correcting how .NET Framework or .NET Core web applications handles web requests. (CVE-2019-0980, CVE-2019-0981)", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "nessus", "title": "KB4494441: Windows 10 Version 1809 and Windows Server 2019 May 2019 Security Update (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-12126", "CVE-2018-12127", "CVE-2018-12130", "CVE-2019-0707", "CVE-2019-0725", "CVE-2019-0727", "CVE-2019-0733", "CVE-2019-0734", "CVE-2019-0758", "CVE-2019-0820", "CVE-2019-0863", "CVE-2019-0864", "CVE-2019-0881", "CVE-2019-0882", "CVE-2019-0884", "CVE-2019-0885", "CVE-2019-0886", "CVE-2019-0889", "CVE-2019-0890", "CVE-2019-0891", "CVE-2019-0892", "CVE-2019-0893", "CVE-2019-0894", "CVE-2019-0895", "CVE-2019-0896", "CVE-2019-0897", "CVE-2019-0898", "CVE-2019-0899", "CVE-2019-0900", "CVE-2019-0901", "CVE-2019-0902", "CVE-2019-0903", "CVE-2019-0911", "CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0918", "CVE-2019-0921", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0926", "CVE-2019-0927", "CVE-2019-0929", "CVE-2019-0930", "CVE-2019-0931", "CVE-2019-0933", "CVE-2019-0936", "CVE-2019-0937", "CVE-2019-0938", "CVE-2019-0940", "CVE-2019-0942", "CVE-2019-0961", "CVE-2019-0980", "CVE-2019-0981", "CVE-2019-0995", "CVE-2019-11091"], "modified": "2021-11-30T00:00:00", "cpe": ["cpe:/o:microsoft:windows", "cpe:/a:microsoft:edge"], "id": "SMB_NT_MS19_MAY_4494441.NASL", "href": "https://www.tenable.com/plugins/nessus/125059", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from the Microsoft Security Updates API. The text\n# itself is copyright (C) Microsoft Corporation.\n#\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(125059);\n script_version(\"1.13\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/11/30\");\n\n script_cve_id(\n \"CVE-2018-12126\",\n \"CVE-2018-12127\",\n \"CVE-2018-12130\",\n \"CVE-2019-0707\",\n \"CVE-2019-0725\",\n \"CVE-2019-0727\",\n \"CVE-2019-0733\",\n \"CVE-2019-0734\",\n \"CVE-2019-0758\",\n \"CVE-2019-0820\",\n \"CVE-2019-0863\",\n \"CVE-2019-0864\",\n \"CVE-2019-0881\",\n \"CVE-2019-0882\",\n \"CVE-2019-0884\",\n \"CVE-2019-0885\",\n \"CVE-2019-0886\",\n \"CVE-2019-0889\",\n \"CVE-2019-0890\",\n \"CVE-2019-0891\",\n \"CVE-2019-0892\",\n \"CVE-2019-0893\",\n \"CVE-2019-0894\",\n \"CVE-2019-0895\",\n \"CVE-2019-0896\",\n \"CVE-2019-0897\",\n \"CVE-2019-0898\",\n \"CVE-2019-0899\",\n \"CVE-2019-0900\",\n \"CVE-2019-0901\",\n \"CVE-2019-0902\",\n \"CVE-2019-0903\",\n \"CVE-2019-0911\",\n \"CVE-2019-0912\",\n \"CVE-2019-0913\",\n \"CVE-2019-0914\",\n \"CVE-2019-0915\",\n \"CVE-2019-0916\",\n \"CVE-2019-0917\",\n \"CVE-2019-0918\",\n \"CVE-2019-0921\",\n \"CVE-2019-0922\",\n \"CVE-2019-0923\",\n \"CVE-2019-0924\",\n \"CVE-2019-0925\",\n \"CVE-2019-0926\",\n \"CVE-2019-0927\",\n \"CVE-2019-0929\",\n \"CVE-2019-0930\",\n \"CVE-2019-0931\",\n \"CVE-2019-0933\",\n \"CVE-2019-0936\",\n \"CVE-2019-0937\",\n \"CVE-2019-0938\",\n \"CVE-2019-0940\",\n \"CVE-2019-0942\",\n \"CVE-2019-0961\",\n \"CVE-2019-0980\",\n \"CVE-2019-0981\",\n \"CVE-2019-0995\",\n \"CVE-2019-11091\"\n );\n script_xref(name:\"MSKB\", value:\"4494441\");\n script_xref(name:\"MSFT\", value:\"MS19-4494441\");\n script_xref(name:\"CISA-KNOWN-EXPLOITED\", value:\"2022/05/03\");\n\n script_name(english:\"KB4494441: Windows 10 Version 1809 and Windows Server 2019 May 2019 Security Update (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)\");\n script_summary(english:\"Checks for rollup.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Windows host is affected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The remote Windows host is missing security update 4494441. \nIt is, therefore, affected by multiple vulnerabilities :\n\n - A new subclass of speculative execution side channel vulnerabilities,\n known as Microarchitectural Data Sampling, exist in Windows.\n An attacker who successfully exploited these vulnerabilities \n may be able to read privileged data across trust boundaries. \n In shared resource environments (such as exists in some cloud \n services configurations), these vulnerabilities could allow \n one virtual machine to improperly access information from \n another. In non-browsing scenarios on standalone systems, an \n attacker would need prior access to the system or an ability \n to run a specially crafted application on the target system \n to leverage these vulnerabilities.\n (CVE-2019-11091, CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)\n\n - A security feature bypass vulnerability exists when\n urlmon.dll improperly handles certain Mark of the Web\n queries. The vulnerability allows Internet Explorer to\n bypass Mark of the Web warnings or restrictions for\n files downloaded or created in a specific way.\n (CVE-2019-0995)\n\n - A remote code execution vulnerability exists in the way\n that Microsoft browsers access objects in memory. The\n vulnerability could corrupt memory in a way that could\n allow an attacker to execute arbitrary code in the\n context of the current user. An attacker who\n successfully exploited the vulnerability could gain the\n same user rights as the current user. (CVE-2019-0940)\n\n - A remote code execution vulnerability exists when\n Microsoft Edge improperly accesses objects in memory.\n The vulnerability could corrupt memory in such a way\n that enables an attacker to execute arbitrary code in\n the context of the current user. An attacker who\n successfully exploited the vulnerability could gain the\n same user rights as the current user. (CVE-2019-0926)\n\n - A remote code execution vulnerability exists when the\n Windows Jet Database Engine improperly handles objects\n in memory. An attacker who successfully exploited this\n vulnerability could execute arbitrary code on a victim\n system. An attacker could exploit this vulnerability by\n enticing a victim to open a specially crafted file. The\n update addresses the vulnerability by correcting the way\n the Windows Jet Database Engine handles objects in\n memory. (CVE-2019-0889, CVE-2019-0890, CVE-2019-0891,\n CVE-2019-0893, CVE-2019-0894, CVE-2019-0895,\n CVE-2019-0896, CVE-2019-0897, CVE-2019-0898,\n CVE-2019-0899, CVE-2019-0900, CVE-2019-0901,\n CVE-2019-0902)\n\n - A remote code execution vulnerability exists when\n Internet Explorer improperly accesses objects in memory.\n The vulnerability could corrupt memory in such a way\n that an attacker could execute arbitrary code in the\n context of the current user. An attacker who\n successfully exploited the vulnerability could gain the\n same user rights as the current user. (CVE-2019-0929)\n\n - An elevation of privilege vulnerability exists when the\n Windows Kernel improperly handles key enumeration. An\n attacker who successfully exploited the vulnerability\n could gain elevated privileges on a targeted system. A\n locally authenticated attacker could exploit this\n vulnerability by running a specially crafted\n application. The security update addresses the\n vulnerability by helping to ensure that the Windows\n Kernel properly handles key enumeration. (CVE-2019-0881)\n\n - An elevation of privilege vulnerability exists in\n Windows when the Win32k component fails to properly\n handle objects in memory. An attacker who successfully\n exploited this vulnerability could run arbitrary code in\n kernel mode. An attacker could then install programs;\n view, change, or delete data; or create new accounts\n with full user rights. (CVE-2019-0892)\n\n - A remote code execution vulnerability exists in the way\n that the Windows Graphics Device Interface (GDI) handles\n objects in the memory. An attacker who successfully\n exploited this vulnerability could take control of the\n affected system. An attacker could then install\n programs; view, change, or delete data; or create new\n accounts with full user rights. (CVE-2019-0903)\n\n - An information disclosure vulnerability exists when\n Windows Hyper-V on a host operating system fails to\n properly validate input from an authenticated user on a\n guest operating system. (CVE-2019-0886)\n\n - An elevation of privilege vulnerability exists in the\n Unified Write Filter (UWF) feature for Windows 10 when\n it improperly restricts access to the registry. An\n attacker who successfully exploited the vulnerability\n could make changes to the registry keys protected by UWF\n without having administrator privileges.\n (CVE-2019-0942)\n\n - A security feature bypass vulnerability exists in\n Windows Defender Application Control (WDAC) which could\n allow an attacker to bypass WDAC enforcement. An\n attacker who successfully exploited this vulnerability\n could circumvent Windows PowerShell Constrained Language\n Mode on the machine. (CVE-2019-0733)\n\n - An spoofing vulnerability exists when Internet Explorer\n improperly handles URLs. An attacker who successfully\n exploited this vulnerability could trick a user by\n redirecting the user to a specially crafted website. The\n specially crafted website could either spoof content or\n serve as a pivot to chain an attack with other\n vulnerabilities in web services. (CVE-2019-0921)\n\n - A remote code execution vulnerability exists in the way\n that the Chakra scripting engine handles objects in\n memory in Microsoft Edge. The vulnerability could\n corrupt memory in such a way that an attacker could\n execute arbitrary code in the context of the current\n user. An attacker who successfully exploited the\n vulnerability could gain the same user rights as the\n current user. (CVE-2019-0912, CVE-2019-0913,\n CVE-2019-0914, CVE-2019-0915, CVE-2019-0916,\n CVE-2019-0917, CVE-2019-0922, CVE-2019-0923,\n CVE-2019-0924, CVE-2019-0925, CVE-2019-0927,\n CVE-2019-0933, CVE-2019-0937)\n\n - An elevation of privilege vulnerability exists when the\n Diagnostics Hub Standard Collector or the Visual Studio\n Standard Collector allows file deletion in arbitrary\n locations. (CVE-2019-0727)\n\n - An elevation of privilege vulnerability exists in\n Microsoft Windows when a man-in-the-middle attacker is\n able to successfully decode and replace authentication\n request using Kerberos, allowing an attacker to be\n validated as an Administrator. The update addresses this\n vulnerability by changing how these requests are\n validated. (CVE-2019-0734)\n\n - A remote code execution vulnerability exists when\n Microsoft Windows OLE fails to properly validate user\n input. An attacker could exploit the vulnerability to\n execute malicious code. (CVE-2019-0885)\n\n - A remote code execution vulnerability exists in the way\n the scripting engine handles objects in memory in\n Microsoft browsers. The vulnerability could corrupt\n memory in such a way that an attacker could execute\n arbitrary code in the context of the current user. An\n attacker who successfully exploited the vulnerability\n could gain the same user rights as the current user.\n (CVE-2019-0884, CVE-2019-0911, CVE-2019-0918)\n\n - An elevation of privilege vulnerability exists in the\n way Windows Error Reporting (WER) handles files. An\n attacker who successfully exploited this vulnerability\n could run arbitrary code in kernel mode. An attacker\n could then install programs; view, change, or delete\n data; or create new accounts with administrator\n privileges. (CVE-2019-0863)\n\n - An information disclosure vulnerability exists when\n Internet Explorer improperly handles objects in memory.\n An attacker who successfully exploited the vulnerability\n could obtain information to further compromise the users\n system. (CVE-2019-0930)\n\n - A denial of service vulnerability exists when .NET\n Framework and .NET Core improperly process RegEx\n strings. An attacker who successfully exploited this\n vulnerability could cause a denial of service against a\n .NET application. A remote unauthenticated attacker\n could exploit this vulnerability by issuing specially\n crafted requests to a .NET Framework (or .NET core)\n application. The update addresses the vulnerability by\n correcting how .NET Framework and .NET Core applications\n handle RegEx string processing. (CVE-2019-0820)\n\n - An elevation of privilege vulnerability exists in\n Microsoft Windows when Windows fails to properly handle\n certain symbolic links. An attacker who successfully\n exploited this vulnerability could potentially set\n certain items to run at a higher level and thereby\n elevate permissions. (CVE-2019-0936)\n\n - An elevation of privilege vulnerability exists when the\n Storage Service improperly handles file operations. An\n attacker who successfully exploited this vulnerability\n could gain elevated privileges on the victim system.\n (CVE-2019-0931)\n\n - A memory corruption vulnerability exists in the Windows\n Server DHCP service when processing specially crafted\n packets. An attacker who successfully exploited the\n vulnerability could run arbitrary code on the DHCP\n server. (CVE-2019-0725)\n\n - A denial of service vulnerability exists when .NET\n Framework improperly handles objects in heap memory. An\n attacker who successfully exploited this vulnerability\n could cause a denial of service against a .NET\n application. (CVE-2019-0864)\n\n - An information disclosure vulnerability exists when the\n Windows GDI component improperly discloses the contents\n of its memory. An attacker who successfully exploited\n the vulnerability could obtain information to further\n compromise the users system. There are multiple ways an\n attacker could exploit the vulnerability, such as by\n convincing a user to open a specially crafted document,\n or by convincing a user to visit an untrusted webpage.\n The security update addresses the vulnerability by\n correcting how the Windows GDI component handles objects\n in memory. (CVE-2019-0758, CVE-2019-0882, CVE-2019-0961)\n\n - An elevation of privilege vulnerability exists in\n Microsoft Edge that could allow an attacker to escape\n from the AppContainer sandbox in the browser. An\n attacker who successfully exploited this vulnerability\n could gain elevated privileges and break out of the Edge\n AppContainer sandbox. The vulnerability by itself does\n not allow arbitrary code to run. However, this\n vulnerability could be used in conjunction with one or\n more vulnerabilities (for example a remote code\n execution vulnerability and another elevation of\n privilege vulnerability) to take advantage of the\n elevated privileges when running. The security update\n addresses the vulnerability by modifying how Microsoft\n Edge handles sandboxing. (CVE-2019-0938)\n\n - An elevation of privilege vulnerability exists in the\n Network Driver Interface Specification (NDIS) when\n ndis.sys fails to check the length of a buffer prior to\n copying memory to it. (CVE-2019-0707)\n\n - A denial of service vulnerability exists when .NET\n Framework or .NET Core improperly handle web requests.\n An attacker who successfully exploited this\n vulnerability could cause a denial of service against a\n .NET Framework or .NET Core web application. The\n vulnerability can be exploited remotely, without\n authentication. A remote unauthenticated attacker could\n exploit this vulnerability by issuing specially crafted\n requests to the .NET Framework or .NET Core application.\n The update addresses the vulnerability by correcting how\n .NET Framework or .NET Core web applications handles web\n requests. (CVE-2019-0980, CVE-2019-0981)\");\n # https://support.microsoft.com/en-us/help/4494441/windows-10-update-kb4494441\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?54b36c98\");\n # https://support.microsoft.com/en-us/help/4072698/windows-server-speculative-execution-side-channel-vulnerabilities-prot\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?8902cebb\");\n # https://community.tenable.com/s/article/Speculative-Execution-Side-Channel-Vulnerability-Plugin-and-Mitigation-Information\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?7b2b84b8\");\n script_set_attribute(attribute:\"solution\", value:\n \"Apply Cumulative Update KB4494441.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:H/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2019-0903\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2019/05/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2019/05/14\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2019/05/14\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:microsoft:windows\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:microsoft:edge\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows : Microsoft Bulletins\");\n\n script_copyright(english:\"This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"smb_check_rollup.nasl\", \"smb_hotfixes.nasl\", \"ms_bulletin_checks_possible.nasl\", 'microsoft_windows_env_vars.nasl');\n script_require_keys(\"SMB/MS_Bulletin_Checks/Possible\");\n script_require_ports(139, 445, \"Host/patch_management_checks\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"smb_hotfixes_fcheck.inc\");\ninclude(\"smb_hotfixes.inc\");\ninclude(\"smb_func.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"smb_reg_query.inc\");\n\nget_kb_item_or_exit(\"SMB/MS_Bulletin_Checks/Possible\");\n\nbulletin = \"MS19-05\";\nkbs = make_list('4494441');\n\nif (get_kb_item(\"Host/patch_management_checks\")) hotfix_check_3rd_party(bulletin:bulletin, kbs:kbs, severity:SECURITY_HOLE);\n\nget_kb_item_or_exit(\"SMB/Registry/Enumerated\");\nget_kb_item_or_exit(\"SMB/WindowsVersion\", exit_code:1);\nproductname = get_kb_item_or_exit(\"SMB/ProductName\");\n\nif (hotfix_check_sp_range(win10:'0') <= 0) audit(AUDIT_OS_SP_NOT_VULN);\n\nshare = hotfix_get_systemdrive(as_share:TRUE, exit_on_fail:TRUE);\nif (!is_accessible_share(share:share)) audit(AUDIT_SHARE_FAIL, share);\n\nif (\n smb_check_rollup(os:\"10\",\n sp:0,\n os_build:\"17763\",\n rollup_date:\"05_2019\",\n bulletin:bulletin,\n rollup_kb_list:[4494441])\n)\n{\n replace_kb_item(name:'SMB/Missing/'+bulletin, value:TRUE);\n hotfix_security_hole();\n hotfix_check_fversion_end();\n exit(0);\n}\nelse\n{\n hotfix_check_fversion_end();\n audit(AUDIT_HOST_NOT, hotfix_get_audit_report());\n}\n", "cvss": {"score": 9.3, "vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2022-02-28T13:14:45", "description": "The remote Windows host is missing security update 4499181.\nIt is, therefore, affected by multiple vulnerabilities :\n\n - A new subclass of speculative execution side channel vulnerabilities, known as Microarchitectural Data Sampling, exist in Windows.\n An attacker who successfully exploited these vulnerabilities may be able to read privileged data across trust boundaries. In shared resource environments (such as exists in some cloud services configurations), these vulnerabilities could allow one virtual machine to improperly access information from another. In non-browsing scenarios on standalone systems, an attacker would need prior access to the system or an ability to run a specially crafted application on the target system to leverage these vulnerabilities.\n (CVE-2019-11091, CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)\n\n - A security feature bypass vulnerability exists when urlmon.dll improperly handles certain Mark of the Web queries. The vulnerability allows Internet Explorer to bypass Mark of the Web warnings or restrictions for files downloaded or created in a specific way.\n (CVE-2019-0995)\n\n - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. (CVE-2019-0940)\n\n - A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory. (CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895, CVE-2019-0896, CVE-2019-0897, CVE-2019-0898, CVE-2019-0899, CVE-2019-0900, CVE-2019-0901, CVE-2019-0902)\n\n - An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system. A locally authenticated attacker could exploit this vulnerability by running a specially crafted application. The security update addresses the vulnerability by helping to ensure that the Windows Kernel properly handles key enumeration. (CVE-2019-0881)\n\n - A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. (CVE-2019-0903)\n\n - An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system. (CVE-2019-0886)\n\n - An elevation of privilege vulnerability exists in the Unified Write Filter (UWF) feature for Windows 10 when it improperly restricts access to the registry. An attacker who successfully exploited the vulnerability could make changes to the registry keys protected by UWF without having administrator privileges.\n (CVE-2019-0942)\n\n - A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. (CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933)\n\n - A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement. An attacker who successfully exploited this vulnerability could circumvent Windows PowerShell Constrained Language Mode on the machine. (CVE-2019-0733)\n\n - An spoofing vulnerability exists when Internet Explorer improperly handles URLs. An attacker who successfully exploited this vulnerability could trick a user by redirecting the user to a specially crafted website. The specially crafted website could either spoof content or serve as a pivot to chain an attack with other vulnerabilities in web services. (CVE-2019-0921)\n\n - An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations. (CVE-2019-0727)\n\n - An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully decode and replace authentication request using Kerberos, allowing an attacker to be validated as an Administrator. The update addresses this vulnerability by changing how these requests are validated. (CVE-2019-0734)\n\n - A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input. An attacker could exploit the vulnerability to execute malicious code. (CVE-2019-0885)\n\n - A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.\n (CVE-2019-0884, CVE-2019-0911, CVE-2019-0918)\n\n - An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with administrator privileges. (CVE-2019-0863)\n\n - An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.\n An attacker who successfully exploited the vulnerability could obtain information to further compromise the users system. (CVE-2019-0930)\n\n - A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to a .NET Framework (or .NET core) application. The update addresses the vulnerability by correcting how .NET Framework and .NET Core applications handle RegEx string processing. (CVE-2019-0820)\n\n - An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to properly handle certain symbolic links. An attacker who successfully exploited this vulnerability could potentially set certain items to run at a higher level and thereby elevate permissions. (CVE-2019-0936)\n\n - An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges on the victim system.\n (CVE-2019-0931)\n\n - A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. (CVE-2019-0864)\n\n - An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the users system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.\n The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory. (CVE-2019-0758, CVE-2019-0882, CVE-2019-0961)\n\n - An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser. An attacker who successfully exploited this vulnerability could gain elevated privileges and break out of the Edge AppContainer sandbox. The vulnerability by itself does not allow arbitrary code to run. However, this vulnerability could be used in conjunction with one or more vulnerabilities (for example a remote code execution vulnerability and another elevation of privilege vulnerability) to take advantage of the elevated privileges when running. The security update addresses the vulnerability by modifying how Microsoft Edge handles sandboxing. (CVE-2019-0938)\n\n - An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. (CVE-2019-0707)\n\n - A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests.\n An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Framework or .NET Core web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Framework or .NET Core application.\n The update addresses the vulnerability by correcting how .NET Framework or .NET Core web applications handles web requests. (CVE-2019-0980, CVE-2019-0981)", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "nessus", "title": "KB4499181: Windows 10 Version 1703 May 2019 Security Update (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-12126", "CVE-2018-12127", "CVE-2018-12130", "CVE-2019-0707", "CVE-2019-0727", "CVE-2019-0733", "CVE-2019-0734", "CVE-2019-0758", "CVE-2019-0820", "CVE-2019-0863", "CVE-2019-0864", "CVE-2019-0881", "CVE-2019-0882", "CVE-2019-0884", "CVE-2019-0885", "CVE-2019-0886", "CVE-2019-0889", "CVE-2019-0890", "CVE-2019-0891", "CVE-2019-0893", "CVE-2019-0894", "CVE-2019-0895", "CVE-2019-0896", "CVE-2019-0897", "CVE-2019-0898", "CVE-2019-0899", "CVE-2019-0900", "CVE-2019-0901", "CVE-2019-0902", "CVE-2019-0903", "CVE-2019-0911", "CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0918", "CVE-2019-0921", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0930", "CVE-2019-0931", "CVE-2019-0933", "CVE-2019-0936", "CVE-2019-0938", "CVE-2019-0940", "CVE-2019-0942", "CVE-2019-0961", "CVE-2019-0995", "CVE-2019-11091"], "modified": "2021-11-30T00:00:00", "cpe": ["cpe:/o:microsoft:windows", "cpe:/a:microsoft:edge"], "id": "SMB_NT_MS19_MAY_4499181.NASL", "href": "https://www.tenable.com/plugins/nessus/125067", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from the Microsoft Security Updates API. The text\n# itself is copyright (C) Microsoft Corporation.\n#\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(125067);\n script_version(\"1.12\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/11/30\");\n\n script_cve_id(\n \"CVE-2018-12126\",\n \"CVE-2018-12127\",\n \"CVE-2018-12130\",\n \"CVE-2019-0707\",\n \"CVE-2019-0727\",\n \"CVE-2019-0733\",\n \"CVE-2019-0734\",\n \"CVE-2019-0758\",\n \"CVE-2019-0820\",\n \"CVE-2019-0863\",\n \"CVE-2019-0864\",\n \"CVE-2019-0881\",\n \"CVE-2019-0882\",\n \"CVE-2019-0884\",\n \"CVE-2019-0885\",\n \"CVE-2019-0886\",\n \"CVE-2019-0889\",\n \"CVE-2019-0890\",\n \"CVE-2019-0891\",\n \"CVE-2019-0893\",\n \"CVE-2019-0894\",\n \"CVE-2019-0895\",\n \"CVE-2019-0896\",\n \"CVE-2019-0897\",\n \"CVE-2019-0898\",\n \"CVE-2019-0899\",\n \"CVE-2019-0900\",\n \"CVE-2019-0901\",\n \"CVE-2019-0902\",\n \"CVE-2019-0903\",\n \"CVE-2019-0911\",\n \"CVE-2019-0912\",\n \"CVE-2019-0913\",\n \"CVE-2019-0914\",\n \"CVE-2019-0915\",\n \"CVE-2019-0916\",\n \"CVE-2019-0917\",\n \"CVE-2019-0918\",\n \"CVE-2019-0921\",\n \"CVE-2019-0922\",\n \"CVE-2019-0923\",\n \"CVE-2019-0924\",\n \"CVE-2019-0925\",\n \"CVE-2019-0927\",\n \"CVE-2019-0930\",\n \"CVE-2019-0931\",\n \"CVE-2019-0933\",\n \"CVE-2019-0936\",\n \"CVE-2019-0938\",\n \"CVE-2019-0940\",\n \"CVE-2019-0942\",\n \"CVE-2019-0961\",\n \"CVE-2019-0995\",\n \"CVE-2019-11091\"\n );\n script_xref(name:\"MSKB\", value:\"4499181\");\n script_xref(name:\"MSFT\", value:\"MS19-4499181\");\n script_xref(name:\"CISA-KNOWN-EXPLOITED\", value:\"2022/05/03\");\n\n script_name(english:\"KB4499181: Windows 10 Version 1703 May 2019 Security Update (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)\");\n script_summary(english:\"Checks for rollup.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Windows host is affected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The remote Windows host is missing security update 4499181.\nIt is, therefore, affected by multiple vulnerabilities :\n\n - A new subclass of speculative execution side channel vulnerabilities,\n known as Microarchitectural Data Sampling, exist in Windows.\n An attacker who successfully exploited these vulnerabilities \n may be able to read privileged data across trust boundaries. \n In shared resource environments (such as exists in some cloud \n services configurations), these vulnerabilities could allow \n one virtual machine to improperly access information from \n another. In non-browsing scenarios on standalone systems, an \n attacker would need prior access to the system or an ability \n to run a specially crafted application on the target system \n to leverage these vulnerabilities.\n (CVE-2019-11091, CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)\n\n - A security feature bypass vulnerability exists when\n urlmon.dll improperly handles certain Mark of the Web\n queries. The vulnerability allows Internet Explorer to\n bypass Mark of the Web warnings or restrictions for\n files downloaded or created in a specific way.\n (CVE-2019-0995)\n\n - A remote code execution vulnerability exists in the way\n that Microsoft browsers access objects in memory. The\n vulnerability could corrupt memory in a way that could\n allow an attacker to execute arbitrary code in the\n context of the current user. An attacker who\n successfully exploited the vulnerability could gain the\n same user rights as the current user. (CVE-2019-0940)\n\n - A remote code execution vulnerability exists when the\n Windows Jet Database Engine improperly handles objects\n in memory. An attacker who successfully exploited this\n vulnerability could execute arbitrary code on a victim\n system. An attacker could exploit this vulnerability by\n enticing a victim to open a specially crafted file. The\n update addresses the vulnerability by correcting the way\n the Windows Jet Database Engine handles objects in\n memory. (CVE-2019-0889, CVE-2019-0890, CVE-2019-0891,\n CVE-2019-0893, CVE-2019-0894, CVE-2019-0895,\n CVE-2019-0896, CVE-2019-0897, CVE-2019-0898,\n CVE-2019-0899, CVE-2019-0900, CVE-2019-0901,\n CVE-2019-0902)\n\n - An elevation of privilege vulnerability exists when the\n Windows Kernel improperly handles key enumeration. An\n attacker who successfully exploited the vulnerability\n could gain elevated privileges on a targeted system. A\n locally authenticated attacker could exploit this\n vulnerability by running a specially crafted\n application. The security update addresses the\n vulnerability by helping to ensure that the Windows\n Kernel properly handles key enumeration. (CVE-2019-0881)\n\n - A remote code execution vulnerability exists in the way\n that the Windows Graphics Device Interface (GDI) handles\n objects in the memory. An attacker who successfully\n exploited this vulnerability could take control of the\n affected system. An attacker could then install\n programs; view, change, or delete data; or create new\n accounts with full user rights. (CVE-2019-0903)\n\n - An information disclosure vulnerability exists when\n Windows Hyper-V on a host operating system fails to\n properly validate input from an authenticated user on a\n guest operating system. (CVE-2019-0886)\n\n - An elevation of privilege vulnerability exists in the\n Unified Write Filter (UWF) feature for Windows 10 when\n it improperly restricts access to the registry. An\n attacker who successfully exploited the vulnerability\n could make changes to the registry keys protected by UWF\n without having administrator privileges.\n (CVE-2019-0942)\n\n - A remote code execution vulnerability exists in the way\n that the Chakra scripting engine handles objects in\n memory in Microsoft Edge. The vulnerability could\n corrupt memory in such a way that an attacker could\n execute arbitrary code in the context of the current\n user. An attacker who successfully exploited the\n vulnerability could gain the same user rights as the\n current user. (CVE-2019-0912, CVE-2019-0913,\n CVE-2019-0914, CVE-2019-0915, CVE-2019-0916,\n CVE-2019-0917, CVE-2019-0922, CVE-2019-0923,\n CVE-2019-0924, CVE-2019-0925, CVE-2019-0927,\n CVE-2019-0933)\n\n - A security feature bypass vulnerability exists in\n Windows Defender Application Control (WDAC) which could\n allow an attacker to bypass WDAC enforcement. An\n attacker who successfully exploited this vulnerability\n could circumvent Windows PowerShell Constrained Language\n Mode on the machine. (CVE-2019-0733)\n\n - An spoofing vulnerability exists when Internet Explorer\n improperly handles URLs. An attacker who successfully\n exploited this vulnerability could trick a user by\n redirecting the user to a specially crafted website. The\n specially crafted website could either spoof content or\n serve as a pivot to chain an attack with other\n vulnerabilities in web services. (CVE-2019-0921)\n\n - An elevation of privilege vulnerability exists when the\n Diagnostics Hub Standard Collector or the Visual Studio\n Standard Collector allows file deletion in arbitrary\n locations. (CVE-2019-0727)\n\n - An elevation of privilege vulnerability exists in\n Microsoft Windows when a man-in-the-middle attacker is\n able to successfully decode and replace authentication\n request using Kerberos, allowing an attacker to be\n validated as an Administrator. The update addresses this\n vulnerability by changing how these requests are\n validated. (CVE-2019-0734)\n\n - A remote code execution vulnerability exists when\n Microsoft Windows OLE fails to properly validate user\n input. An attacker could exploit the vulnerability to\n execute malicious code. (CVE-2019-0885)\n\n - A remote code execution vulnerability exists in the way\n the scripting engine handles objects in memory in\n Microsoft browsers. The vulnerability could corrupt\n memory in such a way that an attacker could execute\n arbitrary code in the context of the current user. An\n attacker who successfully exploited the vulnerability\n could gain the same user rights as the current user.\n (CVE-2019-0884, CVE-2019-0911, CVE-2019-0918)\n\n - An elevation of privilege vulnerability exists in the\n way Windows Error Reporting (WER) handles files. An\n attacker who successfully exploited this vulnerability\n could run arbitrary code in kernel mode. An attacker\n could then install programs; view, change, or delete\n data; or create new accounts with administrator\n privileges. (CVE-2019-0863)\n\n - An information disclosure vulnerability exists when\n Internet Explorer improperly handles objects in memory.\n An attacker who successfully exploited the vulnerability\n could obtain information to further compromise the users\n system. (CVE-2019-0930)\n\n - A denial of service vulnerability exists when .NET\n Framework and .NET Core improperly process RegEx\n strings. An attacker who successfully exploited this\n vulnerability could cause a denial of service against a\n .NET application. A remote unauthenticated attacker\n could exploit this vulnerability by issuing specially\n crafted requests to a .NET Framework (or .NET core)\n application. The update addresses the vulnerability by\n correcting how .NET Framework and .NET Core applications\n handle RegEx string processing. (CVE-2019-0820)\n\n - An elevation of privilege vulnerability exists in\n Microsoft Windows when Windows fails to properly handle\n certain symbolic links. An attacker who successfully\n exploited this vulnerability could potentially set\n certain items to run at a higher level and thereby\n elevate permissions. (CVE-2019-0936)\n\n - An elevation of privilege vulnerability exists when the\n Storage Service improperly handles file operations. An\n attacker who successfully exploited this vulnerability\n could gain elevated privileges on the victim system.\n (CVE-2019-0931)\n\n - A denial of service vulnerability exists when .NET\n Framework improperly handles objects in heap memory. An\n attacker who successfully exploited this vulnerability\n could cause a denial of service against a .NET\n application. (CVE-2019-0864)\n\n - An information disclosure vulnerability exists when the\n Windows GDI component improperly discloses the contents\n of its memory. An attacker who successfully exploited\n the vulnerability could obtain information to further\n compromise the users system. There are multiple ways an\n attacker could exploit the vulnerability, such as by\n convincing a user to open a specially crafted document,\n or by convincing a user to visit an untrusted webpage.\n The security update addresses the vulnerability by\n correcting how the Windows GDI component handles objects\n in memory. (CVE-2019-0758, CVE-2019-0882, CVE-2019-0961)\n\n - An elevation of privilege vulnerability exists in\n Microsoft Edge that could allow an attacker to escape\n from the AppContainer sandbox in the browser. An\n attacker who successfully exploited this vulnerability\n could gain elevated privileges and break out of the Edge\n AppContainer sandbox. The vulnerability by itself does\n not allow arbitrary code to run. However, this\n vulnerability could be used in conjunction with one or\n more vulnerabilities (for example a remote code\n execution vulnerability and another elevation of\n privilege vulnerability) to take advantage of the\n elevated privileges when running. The security update\n addresses the vulnerability by modifying how Microsoft\n Edge handles sandboxing. (CVE-2019-0938)\n\n - An elevation of privilege vulnerability exists in the\n Network Driver Interface Specification (NDIS) when\n ndis.sys fails to check the length of a buffer prior to\n copying memory to it. (CVE-2019-0707)\n\n - A denial of service vulnerability exists when .NET\n Framework or .NET Core improperly handle web requests.\n An attacker who successfully exploited this\n vulnerability could cause a denial of service against a\n .NET Framework or .NET Core web application. The\n vulnerability can be exploited remotely, without\n authentication. A remote unauthenticated attacker could\n exploit this vulnerability by issuing specially crafted\n requests to the .NET Framework or .NET Core application.\n The update addresses the vulnerability by correcting how\n .NET Framework or .NET Core web applications handles web\n requests. (CVE-2019-0980, CVE-2019-0981)\");\n # https://support.microsoft.com/en-us/help/4499181/windows-10-update-kb4499181\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?3eea20b0\");\n # https://support.microsoft.com/en-us/help/4072698/windows-server-speculative-execution-side-channel-vulnerabilities-prot\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?8902cebb\");\n script_set_attribute(attribute:\"solution\", value:\n \"Apply Cumulative Update KB4499181.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:H/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2019-0903\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2019/05/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2019/05/14\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2019/05/14\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:microsoft:windows\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:microsoft:edge\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows : Microsoft Bulletins\");\n\n script_copyright(english:\"This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"smb_check_rollup.nasl\", \"smb_hotfixes.nasl\", \"ms_bulletin_checks_possible.nasl\", 'microsoft_windows_env_vars.nasl');\n script_require_keys(\"SMB/MS_Bulletin_Checks/Possible\");\n script_require_ports(139, 445, \"Host/patch_management_checks\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"smb_hotfixes_fcheck.inc\");\ninclude(\"smb_hotfixes.inc\");\ninclude(\"smb_func.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"smb_reg_query.inc\");\n\nget_kb_item_or_exit(\"SMB/MS_Bulletin_Checks/Possible\");\n\nbulletin = \"MS19-05\";\nkbs = make_list('4499181');\n\nif (get_kb_item(\"Host/patch_management_checks\")) hotfix_check_3rd_party(bulletin:bulletin, kbs:kbs, severity:SECURITY_HOLE);\n\nget_kb_item_or_exit(\"SMB/Registry/Enumerated\");\nget_kb_item_or_exit(\"SMB/WindowsVersion\", exit_code:1);\nproductname = get_kb_item_or_exit(\"SMB/ProductName\");\n\nif (hotfix_check_sp_range(win10:'0') <= 0) audit(AUDIT_OS_SP_NOT_VULN);\n\nshare = hotfix_get_systemdrive(as_share:TRUE, exit_on_fail:TRUE);\nif (!is_accessible_share(share:share)) audit(AUDIT_SHARE_FAIL, share);\n\nif (\n smb_check_rollup(os:\"10\",\n sp:0,\n os_build:\"15063\",\n rollup_date:\"05_2019\",\n bulletin:bulletin,\n rollup_kb_list:[4499181])\n)\n{\n replace_kb_item(name:'SMB/Missing/'+bulletin, value:TRUE);\n hotfix_security_hole();\n hotfix_check_fversion_end();\n exit(0);\n}\nelse\n{\n hotfix_check_fversion_end();\n audit(AUDIT_HOST_NOT, hotfix_get_audit_report());\n}\n", "cvss": {"score": 9.3, "vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2022-02-28T13:13:55", "description": "The remote Windows host is missing security update 4499179.\nIt is, therefore, affected by multiple vulnerabilities :\n\n - A new subclass of speculative execution side channel vulnerabilities, known as Microarchitectural Data Sampling, exist in Windows.\n An attacker who successfully exploited these vulnerabilities may be able to read privileged data across trust boundaries. In shared resource environments (such as exists in some cloud services configurations), these vulnerabilities could allow one virtual machine to improperly access information from another. In non-browsing scenarios on standalone systems, an attacker would need prior access to the system or an ability to run a specially crafted application on the target system to leverage these vulnerabilities.\n (CVE-2019-11091, CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)\n\n - A security feature bypass vulnerability exists when urlmon.dll improperly handles certain Mark of the Web queries. The vulnerability allows Internet Explorer to bypass Mark of the Web warnings or restrictions for files downloaded or created in a specific way.\n (CVE-2019-0995)\n\n - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. (CVE-2019-0940)\n\n - A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory. (CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895, CVE-2019-0896, CVE-2019-0897, CVE-2019-0898, CVE-2019-0899, CVE-2019-0900, CVE-2019-0901, CVE-2019-0902)\n\n - An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system. A locally authenticated attacker could exploit this vulnerability by running a specially crafted application. The security update addresses the vulnerability by helping to ensure that the Windows Kernel properly handles key enumeration. (CVE-2019-0881)\n\n - A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. (CVE-2019-0903)\n\n - An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system. (CVE-2019-0886)\n\n - An elevation of privilege vulnerability exists in the Unified Write Filter (UWF) feature for Windows 10 when it improperly restricts access to the registry. An attacker who successfully exploited the vulnerability could make changes to the registry keys protected by UWF without having administrator privileges.\n (CVE-2019-0942)\n\n - A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. (CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933)\n\n - A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement. An attacker who successfully exploited this vulnerability could circumvent Windows PowerShell Constrained Language Mode on the machine. (CVE-2019-0733)\n\n - An spoofing vulnerability exists when Internet Explorer improperly handles URLs. An attacker who successfully exploited this vulnerability could trick a user by redirecting the user to a specially crafted website. The specially crafted website could either spoof content or serve as a pivot to chain an attack with other vulnerabilities in web services. (CVE-2019-0921)\n\n - An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations. (CVE-2019-0727)\n\n - An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully decode and replace authentication request using Kerberos, allowing an attacker to be validated as an Administrator. The update addresses this vulnerability by changing how these requests are validated. (CVE-2019-0734)\n\n - A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input. An attacker could exploit the vulnerability to execute malicious code. (CVE-2019-0885)\n\n - A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.\n (CVE-2019-0884, CVE-2019-0911, CVE-2019-0918)\n\n - An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with administrator privileges. (CVE-2019-0863)\n\n - An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.\n An attacker who successfully exploited the vulnerability could obtain information to further compromise the users system. (CVE-2019-0930)\n\n - A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to a .NET Framework (or .NET core) application. The update addresses the vulnerability by correcting how .NET Framework and .NET Core applications handle RegEx string processing. (CVE-2019-0820)\n\n - An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to properly handle certain symbolic links. An attacker who successfully exploited this vulnerability could potentially set certain items to run at a higher level and thereby elevate permissions. (CVE-2019-0936)\n\n - A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. (CVE-2019-0864)\n\n - An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the users system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.\n The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory. (CVE-2019-0758, CVE-2019-0882, CVE-2019-0961)\n\n - An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser. An attacker who successfully exploited this vulnerability could gain elevated privileges and break out of the Edge AppContainer sandbox. The vulnerability by itself does not allow arbitrary code to run. However, this vulnerability could be used in conjunction with one or more vulnerabilities (for example a remote code execution vulnerability and another elevation of privilege vulnerability) to take advantage of the elevated privileges when running. The security update addresses the vulnerability by modifying how Microsoft Edge handles sandboxing. (CVE-2019-0938)\n\n - An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. (CVE-2019-0707)\n\n - A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests.\n An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Framework or .NET Core web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Framework or .NET Core application.\n The update addresses the vulnerability by correcting how .NET Framework or .NET Core web applications handles web requests. (CVE-2019-0980, CVE-2019-0981)", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "nessus", "title": "KB4499179: Windows 10 Version 1709 and Windows Server Version 1709 May 2019 Security Update (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-12126", "CVE-2018-12127", "CVE-2018-12130", "CVE-2019-0707", "CVE-2019-0727", "CVE-2019-0733", "CVE-2019-0734", "CVE-2019-0758", "CVE-2019-0820", "CVE-2019-0863", "CVE-2019-0864", "CVE-2019-0881", "CVE-2019-0882", "CVE-2019-0884", "CVE-2019-0885", "CVE-2019-0886", "CVE-2019-0889", "CVE-2019-0890", "CVE-2019-0891", "CVE-2019-0892", "CVE-2019-0893", "CVE-2019-0894", "CVE-2019-0895", "CVE-2019-0896", "CVE-2019-0897", "CVE-2019-0898", "CVE-2019-0899", "CVE-2019-0900", "CVE-2019-0901", "CVE-2019-0902", "CVE-2019-0903", "CVE-2019-0911", "CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0918", "CVE-2019-0921", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0930", "CVE-2019-0931", "CVE-2019-0933", "CVE-2019-0936", "CVE-2019-0937", "CVE-2019-0938", "CVE-2019-0940", "CVE-2019-0942", "CVE-2019-0961", "CVE-2019-0980", "CVE-2019-0981", "CVE-2019-0995", "CVE-2019-11091"], "modified": "2021-11-30T00:00:00", "cpe": ["cpe:/o:microsoft:windows", "cpe:/a:microsoft:edge"], "id": "SMB_NT_MS19_MAY_4499179.NASL", "href": "https://www.tenable.com/plugins/nessus/125066", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from the Microsoft Security Updates API. The text\n# itself is copyright (C) Microsoft Corporation.\n#\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(125066);\n script_version(\"1.13\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/11/30\");\n\n script_cve_id(\n \"CVE-2018-12126\",\n \"CVE-2018-12127\",\n \"CVE-2018-12130\",\n \"CVE-2019-0707\",\n \"CVE-2019-0727\",\n \"CVE-2019-0733\",\n \"CVE-2019-0734\",\n \"CVE-2019-0758\",\n \"CVE-2019-0820\",\n \"CVE-2019-0863\",\n \"CVE-2019-0864\",\n \"CVE-2019-0881\",\n \"CVE-2019-0882\",\n \"CVE-2019-0884\",\n \"CVE-2019-0885\",\n \"CVE-2019-0886\",\n \"CVE-2019-0889\",\n \"CVE-2019-0890\",\n \"CVE-2019-0891\",\n \"CVE-2019-0892\",\n \"CVE-2019-0893\",\n \"CVE-2019-0894\",\n \"CVE-2019-0895\",\n \"CVE-2019-0896\",\n \"CVE-2019-0897\",\n \"CVE-2019-0898\",\n \"CVE-2019-0899\",\n \"CVE-2019-0900\",\n \"CVE-2019-0901\",\n \"CVE-2019-0902\",\n \"CVE-2019-0903\",\n \"CVE-2019-0911\",\n \"CVE-2019-0912\",\n \"CVE-2019-0913\",\n \"CVE-2019-0914\",\n \"CVE-2019-0915\",\n \"CVE-2019-0916\",\n \"CVE-2019-0917\",\n \"CVE-2019-0918\",\n \"CVE-2019-0921\",\n \"CVE-2019-0922\",\n \"CVE-2019-0923\",\n \"CVE-2019-0924\",\n \"CVE-2019-0925\",\n \"CVE-2019-0927\",\n \"CVE-2019-0930\",\n \"CVE-2019-0931\",\n \"CVE-2019-0933\",\n \"CVE-2019-0936\",\n \"CVE-2019-0937\",\n \"CVE-2019-0938\",\n \"CVE-2019-0940\",\n \"CVE-2019-0942\",\n \"CVE-2019-0961\",\n \"CVE-2019-0980\",\n \"CVE-2019-0981\",\n \"CVE-2019-0995\",\n \"CVE-2019-11091\"\n );\n script_xref(name:\"MSKB\", value:\"4499179\");\n script_xref(name:\"MSFT\", value:\"MS19-4499179\");\n script_xref(name:\"CISA-KNOWN-EXPLOITED\", value:\"2022/05/03\");\n\n script_name(english:\"KB4499179: Windows 10 Version 1709 and Windows Server Version 1709 May 2019 Security Update (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)\");\n script_summary(english:\"Checks for rollup.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Windows host is affected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The remote Windows host is missing security update 4499179.\nIt is, therefore, affected by multiple vulnerabilities :\n\n - A new subclass of speculative execution side channel vulnerabilities,\n known as Microarchitectural Data Sampling, exist in Windows.\n An attacker who successfully exploited these vulnerabilities \n may be able to read privileged data across trust boundaries. \n In shared resource environments (such as exists in some cloud \n services configurations), these vulnerabilities could allow \n one virtual machine to improperly access information from \n another. In non-browsing scenarios on standalone systems, an \n attacker would need prior access to the system or an ability \n to run a specially crafted application on the target system \n to leverage these vulnerabilities.\n (CVE-2019-11091, CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)\n\n - A security feature bypass vulnerability exists when\n urlmon.dll improperly handles certain Mark of the Web\n queries. The vulnerability allows Internet Explorer to\n bypass Mark of the Web warnings or restrictions for\n files downloaded or created in a specific way.\n (CVE-2019-0995)\n\n - A remote code execution vulnerability exists in the way\n that Microsoft browsers access objects in memory. The\n vulnerability could corrupt memory in a way that could\n allow an attacker to execute arbitrary code in the\n context of the current user. An attacker who\n successfully exploited the vulnerability could gain the\n same user rights as the current user. (CVE-2019-0940)\n\n - A remote code execution vulnerability exists when the\n Windows Jet Database Engine improperly handles objects\n in memory. An attacker who successfully exploited this\n vulnerability could execute arbitrary code on a victim\n system. An attacker could exploit this vulnerability by\n enticing a victim to open a specially crafted file. The\n update addresses the vulnerability by correcting the way\n the Windows Jet Database Engine handles objects in\n memory. (CVE-2019-0889, CVE-2019-0890, CVE-2019-0891,\n CVE-2019-0893, CVE-2019-0894, CVE-2019-0895,\n CVE-2019-0896, CVE-2019-0897, CVE-2019-0898,\n CVE-2019-0899, CVE-2019-0900, CVE-2019-0901,\n CVE-2019-0902)\n\n - An elevation of privilege vulnerability exists when the\n Windows Kernel improperly handles key enumeration. An\n attacker who successfully exploited the vulnerability\n could gain elevated privileges on a targeted system. A\n locally authenticated attacker could exploit this\n vulnerability by running a specially crafted\n application. The security update addresses the\n vulnerability by helping to ensure that the Windows\n Kernel properly handles key enumeration. (CVE-2019-0881)\n\n - A remote code execution vulnerability exists in the way\n that the Windows Graphics Device Interface (GDI) handles\n objects in the memory. An attacker who successfully\n exploited this vulnerability could take control of the\n affected system. An attacker could then install\n programs; view, change, or delete data; or create new\n accounts with full user rights. (CVE-2019-0903)\n\n - An information disclosure vulnerability exists when\n Windows Hyper-V on a host operating system fails to\n properly validate input from an authenticated user on a\n guest operating system. (CVE-2019-0886)\n\n - An elevation of privilege vulnerability exists in the\n Unified Write Filter (UWF) feature for Windows 10 when\n it improperly restricts access to the registry. An\n attacker who successfully exploited the vulnerability\n could make changes to the registry keys protected by UWF\n without having administrator privileges.\n (CVE-2019-0942)\n\n - A remote code execution vulnerability exists in the way\n that the Chakra scripting engine handles objects in\n memory in Microsoft Edge. The vulnerability could\n corrupt memory in such a way that an attacker could\n execute arbitrary code in the context of the current\n user. An attacker who successfully exploited the\n vulnerability could gain the same user rights as the\n current user. (CVE-2019-0912, CVE-2019-0913,\n CVE-2019-0914, CVE-2019-0915, CVE-2019-0916,\n CVE-2019-0917, CVE-2019-0922, CVE-2019-0923,\n CVE-2019-0924, CVE-2019-0925, CVE-2019-0927,\n CVE-2019-0933)\n\n - A security feature bypass vulnerability exists in\n Windows Defender Application Control (WDAC) which could\n allow an attacker to bypass WDAC enforcement. An\n attacker who successfully exploited this vulnerability\n could circumvent Windows PowerShell Constrained Language\n Mode on the machine. (CVE-2019-0733)\n\n - An spoofing vulnerability exists when Internet Explorer\n improperly handles URLs. An attacker who successfully\n exploited this vulnerability could trick a user by\n redirecting the user to a specially crafted website. The\n specially crafted website could either spoof content or\n serve as a pivot to chain an attack with other\n vulnerabilities in web services. (CVE-2019-0921)\n\n - An elevation of privilege vulnerability exists when the\n Diagnostics Hub Standard Collector or the Visual Studio\n Standard Collector allows file deletion in arbitrary\n locations. (CVE-2019-0727)\n\n - An elevation of privilege vulnerability exists in\n Microsoft Windows when a man-in-the-middle attacker is\n able to successfully decode and replace authentication\n request using Kerberos, allowing an attacker to be\n validated as an Administrator. The update addresses this\n vulnerability by changing how these requests are\n validated. (CVE-2019-0734)\n\n - A remote code execution vulnerability exists when\n Microsoft Windows OLE fails to properly validate user\n input. An attacker could exploit the vulnerability to\n execute malicious code. (CVE-2019-0885)\n\n - A remote code execution vulnerability exists in the way\n the scripting engine handles objects in memory in\n Microsoft browsers. The vulnerability could corrupt\n memory in such a way that an attacker could execute\n arbitrary code in the context of the current user. An\n attacker who successfully exploited the vulnerability\n could gain the same user rights as the current user.\n (CVE-2019-0884, CVE-2019-0911, CVE-2019-0918)\n\n - An elevation of privilege vulnerability exists in the\n way Windows Error Reporting (WER) handles files. An\n attacker who successfully exploited this vulnerability\n could run arbitrary code in kernel mode. An attacker\n could then install programs; view, change, or delete\n data; or create new accounts with administrator\n privileges. (CVE-2019-0863)\n\n - An information disclosure vulnerability exists when\n Internet Explorer improperly handles objects in memory.\n An attacker who successfully exploited the vulnerability\n could obtain information to further compromise the users\n system. (CVE-2019-0930)\n\n - A denial of service vulnerability exists when .NET\n Framework and .NET Core improperly process RegEx\n strings. An attacker who successfully exploited this\n vulnerability could cause a denial of service against a\n .NET application. A remote unauthenticated attacker\n could exploit this vulnerability by issuing specially\n crafted requests to a .NET Framework (or .NET core)\n application. The update addresses the vulnerability by\n correcting how .NET Framework and .NET Core applications\n handle RegEx string processing. (CVE-2019-0820)\n\n - An elevation of privilege vulnerability exists in\n Microsoft Windows when Windows fails to properly handle\n certain symbolic links. An attacker who successfully\n exploited this vulnerability could potentially set\n certain items to run at a higher level and thereby\n elevate permissions. (CVE-2019-0936)\n\n - A denial of service vulnerability exists when .NET\n Framework improperly handles objects in heap memory. An\n attacker who successfully exploited this vulnerability\n could cause a denial of service against a .NET\n application. (CVE-2019-0864)\n\n - An information disclosure vulnerability exists when the\n Windows GDI component improperly discloses the contents\n of its memory. An attacker who successfully exploited\n the vulnerability could obtain information to further\n compromise the users system. There are multiple ways an\n attacker could exploit the vulnerability, such as by\n convincing a user to open a specially crafted document,\n or by convincing a user to visit an untrusted webpage.\n The security update addresses the vulnerability by\n correcting how the Windows GDI component handles objects\n in memory. (CVE-2019-0758, CVE-2019-0882, CVE-2019-0961)\n\n - An elevation of privilege vulnerability exists in\n Microsoft Edge that could allow an attacker to escape\n from the AppContainer sandbox in the browser. An\n attacker who successfully exploited this vulnerability\n could gain elevated privileges and break out of the Edge\n AppContainer sandbox. The vulnerability by itself does\n not allow arbitrary code to run. However, this\n vulnerability could be used in conjunction with one or\n more vulnerabilities (for example a remote code\n execution vulnerability and another elevation of\n privilege vulnerability) to take advantage of the\n elevated privileges when running. The security update\n addresses the vulnerability by modifying how Microsoft\n Edge handles sandboxing. (CVE-2019-0938)\n\n - An elevation of privilege vulnerability exists in the\n Network Driver Interface Specification (NDIS) when\n ndis.sys fails to check the length of a buffer prior to\n copying memory to it. (CVE-2019-0707)\n\n - A denial of service vulnerability exists when .NET\n Framework or .NET Core improperly handle web requests.\n An attacker who successfully exploited this\n vulnerability could cause a denial of service against a\n .NET Framework or .NET Core web application. The\n vulnerability can be exploited remotely, without\n authentication. A remote unauthenticated attacker could\n exploit this vulnerability by issuing specially crafted\n requests to the .NET Framework or .NET Core application.\n The update addresses the vulnerability by correcting how\n .NET Framework or .NET Core web applications handles web\n requests. (CVE-2019-0980, CVE-2019-0981)\");\n # https://support.microsoft.com/en-ca/help/4499179/windows-10-update-kb4499179\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?59ed4a1e\");\n # https://support.microsoft.com/en-us/help/4072698/windows-server-speculative-execution-side-channel-vulnerabilities-prot\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?8902cebb\");\n script_set_attribute(attribute:\"solution\", value:\n \"Apply Cumulative Update KB4499179.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:H/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2019-0903\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2019/05/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2019/05/14\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2019/05/14\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:microsoft:windows\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:microsoft:edge\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows : Microsoft Bulletins\");\n\n script_copyright(english:\"This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"smb_check_rollup.nasl\", \"smb_hotfixes.nasl\", \"ms_bulletin_checks_possible.nasl\", 'microsoft_windows_env_vars.nasl');\n script_require_keys(\"SMB/MS_Bulletin_Checks/Possible\");\n script_require_ports(139, 445, \"Host/patch_management_checks\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"smb_hotfixes_fcheck.inc\");\ninclude(\"smb_hotfixes.inc\");\ninclude(\"smb_func.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"smb_reg_query.inc\");\n\nget_kb_item_or_exit(\"SMB/MS_Bulletin_Checks/Possible\");\n\nbulletin = \"MS19-05\";\nkbs = make_list('4499179');\n\nif (get_kb_item(\"Host/patch_management_checks\")) hotfix_check_3rd_party(bulletin:bulletin, kbs:kbs, severity:SECURITY_HOLE);\n\nget_kb_item_or_exit(\"SMB/Registry/Enumerated\");\nget_kb_item_or_exit(\"SMB/WindowsVersion\", exit_code:1);\nif (hotfix_check_sp_range(win10:'0') <= 0) audit(AUDIT_OS_SP_NOT_VULN);\nmy_os_build = get_kb_item(\"SMB/WindowsVersionBuild\");\nproductname = get_kb_item_or_exit(\"SMB/ProductName\");\n\nif (my_os_build = \"16299\" && \"enterprise\" >!< tolower(productname) && \"education\" >!< tolower(productname) && \"server\" >!< tolower(productname))\n audit(AUDIT_OS_NOT, \"a supported version of Windows\");\n\nshare = hotfix_get_systemdrive(as_share:TRUE, exit_on_fail:TRUE);\nif (!is_accessible_share(share:share)) audit(AUDIT_SHARE_FAIL, share);\n\nif (\n smb_check_rollup(os:\"10\",\n sp:0,\n os_build:\"16299\",\n rollup_date:\"05_2019\",\n bulletin:bulletin,\n rollup_kb_list:[4499179])\n)\n{\n replace_kb_item(name:'SMB/Missing/'+bulletin, value:TRUE);\n hotfix_security_hole();\n hotfix_check_fversion_end();\n exit(0);\n}\nelse\n{\n hotfix_check_fversion_end();\n audit(AUDIT_HOST_NOT, hotfix_get_audit_report());\n}\n", "cvss": {"score": 9.3, "vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2022-02-28T13:15:09", "description": "The remote Windows host is missing security update 4494440. It is, therefore, affected by multiple vulnerabilities :\n\n - A new subclass of speculative execution side channel vulnerabilities, known as Microarchitectural Data Sampling, exist in Windows.\n An attacker who successfully exploited these vulnerabilities may be able to read privileged data across trust boundaries. In shared resource environments (such as exists in some cloud services configurations), these vulnerabilities could allow one virtual machine to improperly access information from another. In non-browsing scenarios on standalone systems, an attacker would need prior access to the system or an ability to run a specially crafted application on the target system to leverage these vulnerabilities.\n (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091)\n\n - A security feature bypass vulnerability exists when urlmon.dll improperly handles certain Mark of the Web queries. The vulnerability allows Internet Explorer to bypass Mark of the Web warnings or restrictions for files downloaded or created in a specific way.\n (CVE-2019-0995)\n\n - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. (CVE-2019-0940)\n\n - A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory. (CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895, CVE-2019-0896, CVE-2019-0897, CVE-2019-0898, CVE-2019-0899, CVE-2019-0900, CVE-2019-0901, CVE-2019-0902)\n\n - An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system. A locally authenticated attacker could exploit this vulnerability by running a specially crafted application. The security update addresses the vulnerability by helping to ensure that the Windows Kernel properly handles key enumeration. (CVE-2019-0881)\n\n - A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. (CVE-2019-0903)\n\n - An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system. (CVE-2019-0886)\n\n - An elevation of privilege vulnerability exists in the Unified Write Filter (UWF) feature for Windows 10 when it improperly restricts access to the registry. An attacker who successfully exploited the vulnerability could make changes to the registry keys protected by UWF without having administrator privileges.\n (CVE-2019-0942)\n\n - A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. (CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933)\n\n - A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement. An attacker who successfully exploited this vulnerability could circumvent Windows PowerShell Constrained Language Mode on the machine. (CVE-2019-0733)\n\n - An spoofing vulnerability exists when Internet Explorer improperly handles URLs. An attacker who successfully exploited this vulnerability could trick a user by redirecting the user to a specially crafted website. The specially crafted website could either spoof content or serve as a pivot to chain an attack with other vulnerabilities in web services. (CVE-2019-0921)\n\n - An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations. (CVE-2019-0727)\n\n - An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully decode and replace authentication request using Kerberos, allowing an attacker to be validated as an Administrator. The update addresses this vulnerability by changing how these requests are validated. (CVE-2019-0734)\n\n - A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input. An attacker could exploit the vulnerability to execute malicious code. (CVE-2019-0885)\n\n - A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.\n (CVE-2019-0884, CVE-2019-0911, CVE-2019-0918)\n\n - An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with administrator privileges. (CVE-2019-0863)\n\n - An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.\n An attacker who successfully exploited the vulnerability could obtain information to further compromise the users system. (CVE-2019-0930)\n\n - A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to a .NET Framework (or .NET core) application. The update addresses the vulnerability by correcting how .NET Framework and .NET Core applications handle RegEx string processing. (CVE-2019-0820)\n\n - An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to properly handle certain symbolic links. An attacker who successfully exploited this vulnerability could potentially set certain items to run at a higher level and thereby elevate permissions. (CVE-2019-0936)\n\n - A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could run arbitrary code on the DHCP server. (CVE-2019-0725)\n\n - A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. (CVE-2019-0864)\n\n - An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the users system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.\n The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory. (CVE-2019-0758, CVE-2019-0882, CVE-2019-0961)\n\n - An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser. An attacker who successfully exploited this vulnerability could gain elevated privileges and break out of the Edge AppContainer sandbox. The vulnerability by itself does not allow arbitrary code to run. However, this vulnerability could be used in conjunction with one or more vulnerabilities (for example a remote code execution vulnerability and another elevation of privilege vulnerability) to take advantage of the elevated privileges when running. The security update addresses the vulnerability by modifying how Microsoft Edge handles sandboxing. (CVE-2019-0938)\n\n - An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. (CVE-2019-0707)\n\n - A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests.\n An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Framework or .NET Core web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Framework or .NET Core application.\n The update addresses the vulnerability by correcting how .NET Framework or .NET Core web applications handles web requests. (CVE-2019-0980, CVE-2019-0981)", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "nessus", "title": "KB4494440: Windows 10 Version 1607 and Windows Server 2016 May 2019 Security Update (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-12126", "CVE-2018-12127", "CVE-2018-12130", "CVE-2019-0707", "CVE-2019-0725", "CVE-2019-0727", "CVE-2019-0733", "CVE-2019-0734", "CVE-2019-0758", "CVE-2019-0820", "CVE-2019-0863", "CVE-2019-0864", "CVE-2019-0881", "CVE-2019-0882", "CVE-2019-0884", "CVE-2019-0885", "CVE-2019-0886", "CVE-2019-0889", "CVE-2019-0890", "CVE-2019-0891", "CVE-2019-0893", "CVE-2019-0894", "CVE-2019-0895", "CVE-2019-0896", "CVE-2019-0897", "CVE-2019-0898", "CVE-2019-0899", "CVE-2019-0900", "CVE-2019-0901", "CVE-2019-0902", "CVE-2019-0903", "CVE-2019-0911", "CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0918", "CVE-2019-0921", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0927", "CVE-2019-0930", "CVE-2019-0933", "CVE-2019-0936", "CVE-2019-0938", "CVE-2019-0940", "CVE-2019-0942", "CVE-2019-0961", "CVE-2019-0980", "CVE-2019-0981", "CVE-2019-0995", "CVE-2019-11091"], "modified": "2021-11-30T00:00:00", "cpe": ["cpe:/o:microsoft:windows", "cpe:/a:microsoft:edge"], "id": "SMB_NT_MS19_MAY_4494440.NASL", "href": "https://www.tenable.com/plugins/nessus/125058", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from the Microsoft Security Updates API. The text\n# itself is copyright (C) Microsoft Corporation.\n#\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(125058);\n script_version(\"1.13\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/11/30\");\n\n script_cve_id(\n \"CVE-2018-12126\",\n \"CVE-2018-12127\",\n \"CVE-2018-12130\",\n \"CVE-2019-0707\",\n \"CVE-2019-0725\",\n \"CVE-2019-0727\",\n \"CVE-2019-0733\",\n \"CVE-2019-0734\",\n \"CVE-2019-0758\",\n \"CVE-2019-0820\",\n \"CVE-2019-0863\",\n \"CVE-2019-0864\",\n \"CVE-2019-0881\",\n \"CVE-2019-0882\",\n \"CVE-2019-0884\",\n \"CVE-2019-0885\",\n \"CVE-2019-0886\",\n \"CVE-2019-0889\",\n \"CVE-2019-0890\",\n \"CVE-2019-0891\",\n \"CVE-2019-0893\",\n \"CVE-2019-0894\",\n \"CVE-2019-0895\",\n \"CVE-2019-0896\",\n \"CVE-2019-0897\",\n \"CVE-2019-0898\",\n \"CVE-2019-0899\",\n \"CVE-2019-0900\",\n \"CVE-2019-0901\",\n \"CVE-2019-0902\",\n \"CVE-2019-0903\",\n \"CVE-2019-0911\",\n \"CVE-2019-0912\",\n \"CVE-2019-0913\",\n \"CVE-2019-0914\",\n \"CVE-2019-0915\",\n \"CVE-2019-0916\",\n \"CVE-2019-0917\",\n \"CVE-2019-0918\",\n \"CVE-2019-0921\",\n \"CVE-2019-0922\",\n \"CVE-2019-0923\",\n \"CVE-2019-0924\",\n \"CVE-2019-0925\",\n \"CVE-2019-0927\",\n \"CVE-2019-0930\",\n \"CVE-2019-0933\",\n \"CVE-2019-0936\",\n \"CVE-2019-0938\",\n \"CVE-2019-0940\",\n \"CVE-2019-0942\",\n \"CVE-2019-0961\",\n \"CVE-2019-0980\",\n \"CVE-2019-0981\",\n \"CVE-2019-0995\",\n \"CVE-2019-11091\"\n );\n script_xref(name:\"MSKB\", value:\"4494440\");\n script_xref(name:\"MSFT\", value:\"MS19-4494440\");\n script_xref(name:\"CISA-KNOWN-EXPLOITED\", value:\"2022/05/03\");\n\n script_name(english:\"KB4494440: Windows 10 Version 1607 and Windows Server 2016 May 2019 Security Update (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)\");\n script_summary(english:\"Checks for rollup.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Windows host is affected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The remote Windows host is missing security update 4494440. \nIt is, therefore, affected by multiple vulnerabilities :\n\n - A new subclass of speculative execution side channel vulnerabilities,\n known as Microarchitectural Data Sampling, exist in Windows.\n An attacker who successfully exploited these vulnerabilities \n may be able to read privileged data across trust boundaries. \n In shared resource environments (such as exists in some cloud \n services configurations), these vulnerabilities could allow \n one virtual machine to improperly access information from \n another. In non-browsing scenarios on standalone systems, an \n attacker would need prior access to the system or an ability \n to run a specially crafted application on the target system \n to leverage these vulnerabilities.\n (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091)\n\n - A security feature bypass vulnerability exists when\n urlmon.dll improperly handles certain Mark of the Web\n queries. The vulnerability allows Internet Explorer to\n bypass Mark of the Web warnings or restrictions for\n files downloaded or created in a specific way.\n (CVE-2019-0995)\n\n - A remote code execution vulnerability exists in the way\n that Microsoft browsers access objects in memory. The\n vulnerability could corrupt memory in a way that could\n allow an attacker to execute arbitrary code in the\n context of the current user. An attacker who\n successfully exploited the vulnerability could gain the\n same user rights as the current user. (CVE-2019-0940)\n\n - A remote code execution vulnerability exists when the\n Windows Jet Database Engine improperly handles objects\n in memory. An attacker who successfully exploited this\n vulnerability could execute arbitrary code on a victim\n system. An attacker could exploit this vulnerability by\n enticing a victim to open a specially crafted file. The\n update addresses the vulnerability by correcting the way\n the Windows Jet Database Engine handles objects in\n memory. (CVE-2019-0889, CVE-2019-0890, CVE-2019-0891,\n CVE-2019-0893, CVE-2019-0894, CVE-2019-0895,\n CVE-2019-0896, CVE-2019-0897, CVE-2019-0898,\n CVE-2019-0899, CVE-2019-0900, CVE-2019-0901,\n CVE-2019-0902)\n\n - An elevation of privilege vulnerability exists when the\n Windows Kernel improperly handles key enumeration. An\n attacker who successfully exploited the vulnerability\n could gain elevated privileges on a targeted system. A\n locally authenticated attacker could exploit this\n vulnerability by running a specially crafted\n application. The security update addresses the\n vulnerability by helping to ensure that the Windows\n Kernel properly handles key enumeration. (CVE-2019-0881)\n\n - A remote code execution vulnerability exists in the way\n that the Windows Graphics Device Interface (GDI) handles\n objects in the memory. An attacker who successfully\n exploited this vulnerability could take control of the\n affected system. An attacker could then install\n programs; view, change, or delete data; or create new\n accounts with full user rights. (CVE-2019-0903)\n\n - An information disclosure vulnerability exists when\n Windows Hyper-V on a host operating system fails to\n properly validate input from an authenticated user on a\n guest operating system. (CVE-2019-0886)\n\n - An elevation of privilege vulnerability exists in the\n Unified Write Filter (UWF) feature for Windows 10 when\n it improperly restricts access to the registry. An\n attacker who successfully exploited the vulnerability\n could make changes to the registry keys protected by UWF\n without having administrator privileges.\n (CVE-2019-0942)\n\n - A remote code execution vulnerability exists in the way\n that the Chakra scripting engine handles objects in\n memory in Microsoft Edge. The vulnerability could\n corrupt memory in such a way that an attacker could\n execute arbitrary code in the context of the current\n user. An attacker who successfully exploited the\n vulnerability could gain the same user rights as the\n current user. (CVE-2019-0912, CVE-2019-0913,\n CVE-2019-0914, CVE-2019-0915, CVE-2019-0916,\n CVE-2019-0917, CVE-2019-0922, CVE-2019-0923,\n CVE-2019-0924, CVE-2019-0925, CVE-2019-0927,\n CVE-2019-0933)\n\n - A security feature bypass vulnerability exists in\n Windows Defender Application Control (WDAC) which could\n allow an attacker to bypass WDAC enforcement. An\n attacker who successfully exploited this vulnerability\n could circumvent Windows PowerShell Constrained Language\n Mode on the machine. (CVE-2019-0733)\n\n - An spoofing vulnerability exists when Internet Explorer\n improperly handles URLs. An attacker who successfully\n exploited this vulnerability could trick a user by\n redirecting the user to a specially crafted website. The\n specially crafted website could either spoof content or\n serve as a pivot to chain an attack with other\n vulnerabilities in web services. (CVE-2019-0921)\n\n - An elevation of privilege vulnerability exists when the\n Diagnostics Hub Standard Collector or the Visual Studio\n Standard Collector allows file deletion in arbitrary\n locations. (CVE-2019-0727)\n\n - An elevation of privilege vulnerability exists in\n Microsoft Windows when a man-in-the-middle attacker is\n able to successfully decode and replace authentication\n request using Kerberos, allowing an attacker to be\n validated as an Administrator. The update addresses this\n vulnerability by changing how these requests are\n validated. (CVE-2019-0734)\n\n - A remote code execution vulnerability exists when\n Microsoft Windows OLE fails to properly validate user\n input. An attacker could exploit the vulnerability to\n execute malicious code. (CVE-2019-0885)\n\n - A remote code execution vulnerability exists in the way\n the scripting engine handles objects in memory in\n Microsoft browsers. The vulnerability could corrupt\n memory in such a way that an attacker could execute\n arbitrary code in the context of the current user. An\n attacker who successfully exploited the vulnerability\n could gain the same user rights as the current user.\n (CVE-2019-0884, CVE-2019-0911, CVE-2019-0918)\n\n - An elevation of privilege vulnerability exists in the\n way Windows Error Reporting (WER) handles files. An\n attacker who successfully exploited this vulnerability\n could run arbitrary code in kernel mode. An attacker\n could then install programs; view, change, or delete\n data; or create new accounts with administrator\n privileges. (CVE-2019-0863)\n\n - An information disclosure vulnerability exists when\n Internet Explorer improperly handles objects in memory.\n An attacker who successfully exploited the vulnerability\n could obtain information to further compromise the users\n system. (CVE-2019-0930)\n\n - A denial of service vulnerability exists when .NET\n Framework and .NET Core improperly process RegEx\n strings. An attacker who successfully exploited this\n vulnerability could cause a denial of service against a\n .NET application. A remote unauthenticated attacker\n could exploit this vulnerability by issuing specially\n crafted requests to a .NET Framework (or .NET core)\n application. The update addresses the vulnerability by\n correcting how .NET Framework and .NET Core applications\n handle RegEx string processing. (CVE-2019-0820)\n\n - An elevation of privilege vulnerability exists in\n Microsoft Windows when Windows fails to properly handle\n certain symbolic links. An attacker who successfully\n exploited this vulnerability could potentially set\n certain items to run at a higher level and thereby\n elevate permissions. (CVE-2019-0936)\n\n - A memory corruption vulnerability exists in the Windows\n Server DHCP service when processing specially crafted\n packets. An attacker who successfully exploited the\n vulnerability could run arbitrary code on the DHCP\n server. (CVE-2019-0725)\n\n - A denial of service vulnerability exists when .NET\n Framework improperly handles objects in heap memory. An\n attacker who successfully exploited this vulnerability\n could cause a denial of service against a .NET\n application. (CVE-2019-0864)\n\n - An information disclosure vulnerability exists when the\n Windows GDI component improperly discloses the contents\n of its memory. An attacker who successfully exploited\n the vulnerability could obtain information to further\n compromise the users system. There are multiple ways an\n attacker could exploit the vulnerability, such as by\n convincing a user to open a specially crafted document,\n or by convincing a user to visit an untrusted webpage.\n The security update addresses the vulnerability by\n correcting how the Windows GDI component handles objects\n in memory. (CVE-2019-0758, CVE-2019-0882, CVE-2019-0961)\n\n - An elevation of privilege vulnerability exists in\n Microsoft Edge that could allow an attacker to escape\n from the AppContainer sandbox in the browser. An\n attacker who successfully exploited this vulnerability\n could gain elevated privileges and break out of the Edge\n AppContainer sandbox. The vulnerability by itself does\n not allow arbitrary code to run. However, this\n vulnerability could be used in conjunction with one or\n more vulnerabilities (for example a remote code\n execution vulnerability and another elevation of\n privilege vulnerability) to take advantage of the\n elevated privileges when running. The security update\n addresses the vulnerability by modifying how Microsoft\n Edge handles sandboxing. (CVE-2019-0938)\n\n - An elevation of privilege vulnerability exists in the\n Network Driver Interface Specification (NDIS) when\n ndis.sys fails to check the length of a buffer prior to\n copying memory to it. (CVE-2019-0707)\n\n - A denial of service vulnerability exists when .NET\n Framework or .NET Core improperly handle web requests.\n An attacker who successfully exploited this\n vulnerability could cause a denial of service against a\n .NET Framework or .NET Core web application. The\n vulnerability can be exploited remotely, without\n authentication. A remote unauthenticated attacker could\n exploit this vulnerability by issuing specially crafted\n requests to the .NET Framework or .NET Core application.\n The update addresses the vulnerability by correcting how\n .NET Framework or .NET Core web applications handles web\n requests. (CVE-2019-0980, CVE-2019-0981)\");\n # https://support.microsoft.com/en-us/help/4494440/windows-10-update-kb4494440\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?57eaeb45\");\n # https://support.microsoft.com/en-us/help/4072698/windows-server-speculative-execution-side-channel-vulnerabilities-prot\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?8902cebb\");\n # https://community.tenable.com/s/article/Speculative-Execution-Side-Channel-Vulnerability-Plugin-and-Mitigation-Information\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?7b2b84b8\");\n script_set_attribute(attribute:\"solution\", value:\n \"Apply Cumulative Update KB4494440.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:H/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2019-0903\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2019/05/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2019/05/14\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2019/05/14\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:microsoft:windows\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:microsoft:edge\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows : Microsoft Bulletins\");\n\n script_copyright(english:\"This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"smb_check_rollup.nasl\", \"smb_hotfixes.nasl\", \"ms_bulletin_checks_possible.nasl\", 'microsoft_windows_env_vars.nasl');\n script_require_keys(\"SMB/MS_Bulletin_Checks/Possible\");\n script_require_ports(139, 445, \"Host/patch_management_checks\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"smb_hotfixes_fcheck.inc\");\ninclude(\"smb_hotfixes.inc\");\ninclude(\"smb_func.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"smb_reg_query.inc\");\n\nget_kb_item_or_exit(\"SMB/MS_Bulletin_Checks/Possible\");\n\nbulletin = \"MS19-05\";\nkbs = make_list('4494440');\n\nif (get_kb_item(\"Host/patch_management_checks\")) hotfix_check_3rd_party(bulletin:bulletin, kbs:kbs, severity:SECURITY_HOLE);\n\nget_kb_item_or_exit(\"SMB/Registry/Enumerated\");\nget_kb_item_or_exit(\"SMB/WindowsVersion\", exit_code:1);\nproductname = get_kb_item_or_exit(\"SMB/ProductName\");\n\nif (hotfix_check_sp_range(win10:'0') <= 0) audit(AUDIT_OS_SP_NOT_VULN);\n\nshare = hotfix_get_systemdrive(as_share:TRUE, exit_on_fail:TRUE);\nif (!is_accessible_share(share:share)) audit(AUDIT_SHARE_FAIL, share);\n\nif (\n smb_check_rollup(os:\"10\",\n sp:0,\n os_build:\"14393\",\n rollup_date:\"05_2019\",\n bulletin:bulletin,\n rollup_kb_list:[4494440])\n)\n{\n replace_kb_item(name:'SMB/Missing/'+bulletin, value:TRUE);\n hotfix_security_hole();\n hotfix_check_fversion_end();\n exit(0);\n}\nelse\n{\n hotfix_check_fversion_end();\n audit(AUDIT_HOST_NOT, hotfix_get_audit_report());\n}\n", "cvss": {"score": 9.3, "vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2022-02-28T13:14:45", "description": "The remote Windows host is missing security update 4499154. It is, therefore, affected by multiple vulnerabilities :\n\n - A new subclass of speculative execution side channel vulnerabilities, known as Microarchitectural Data Sampling, exist in Windows.\n An attacker who successfully exploited these vulnerabilities may be able to read privileged data across trust boundaries. In shared resource environments (such as exists in some cloud services configurations), these vulnerabilities could allow one virtual machine to improperly access information from another. In non-browsing scenarios on standalone systems, an attacker would need prior access to the system or an ability to run a specially crafted application on the target system to leverage these vulnerabilities.\n (CVE-2019-11091, CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)\n\n - A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to a .NET Framework (or .NET core) application. The update addresses the vulnerability by correcting how .NET Framework and .NET Core applications handle RegEx string processing. (CVE-2019-0820)\n\n - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. (CVE-2019-0940)\n\n - A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input. An attacker could exploit the vulnerability to execute malicious code. (CVE-2019-0885)\n\n - An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system. A locally authenticated attacker could exploit this vulnerability by running a specially crafted application. The security update addresses the vulnerability by helping to ensure that the Windows Kernel properly handles key enumeration. (CVE-2019-0881)\n\n - A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. (CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0924)\n\n - An spoofing vulnerability exists when Internet Explorer improperly handles URLs. An attacker who successfully exploited this vulnerability could trick a user by redirecting the user to a specially crafted website. The specially crafted website could either spoof content or serve as a pivot to chain an attack with other vulnerabilities in web services. (CVE-2019-0921)\n\n - An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.\n An attacker who successfully exploited the vulnerability could obtain information to further compromise the users system. (CVE-2019-0930)\n\n - A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.\n (CVE-2019-0884, CVE-2019-0911, CVE-2019-0918)\n\n - A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory. (CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895, CVE-2019-0896, CVE-2019-0897, CVE-2019-0898, CVE-2019-0899, CVE-2019-0900, CVE-2019-0901, CVE-2019-0902)\n\n - A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. (CVE-2019-0864)\n\n - An elevation of privilege vulnerability exists in the Unified Write Filter (UWF) feature for Windows 10 when it improperly restricts access to the registry. An attacker who successfully exploited the vulnerability could make changes to the registry keys protected by UWF without having administrator privileges.\n (CVE-2019-0942)\n\n - An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the users system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.\n The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory. (CVE-2019-0758, CVE-2019-0882, CVE-2019-0961)\n\n - An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser. An attacker who successfully exploited this vulnerability could gain elevated privileges and break out of the Edge AppContainer sandbox. The vulnerability by itself does not allow arbitrary code to run. However, this vulnerability could be used in conjunction with one or more vulnerabilities (for example a remote code execution vulnerability and another elevation of privilege vulnerability) to take advantage of the elevated privileges when running. The security update addresses the vulnerability by modifying how Microsoft Edge handles sandboxing. (CVE-2019-0938)\n\n - An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to properly handle certain symbolic links. An attacker who successfully exploited this vulnerability could potentially set certain items to run at a higher level and thereby elevate permissions. (CVE-2019-0936)\n\n - An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. (CVE-2019-0707)\n\n - An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully decode and replace authentication request using Kerberos, allowing an attacker to be validated as an Administrator. The update addresses this vulnerability by changing how these requests are validated. (CVE-2019-0734)\n\n - A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement. An attacker who successfully exploited this vulnerability could circumvent Windows PowerShell Constrained Language Mode on the machine. (CVE-2019-0733)\n\n - A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests.\n An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Framework or .NET Core web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Framework or .NET Core application.\n The update addresses the vulnerability by correcting how .NET Framework or .NET Core web applications handles web requests. (CVE-2019-0980, CVE-2019-0981)\n\n - An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with administrator privileges. (CVE-2019-0863)\n\n - A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. (CVE-2019-0903)\n\n - An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations. (CVE-2019-0727)", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "nessus", "title": "KB4499154: Windows 10 May 2019 Security Update (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-12126", "CVE-2018-12127", "CVE-2018-12130", "CVE-2019-0707", "CVE-2019-0727", "CVE-2019-0733", "CVE-2019-0734", "CVE-2019-0758", "CVE-2019-0820", "CVE-2019-0863", "CVE-2019-0864", "CVE-2019-0881", "CVE-2019-0882", "CVE-2019-0884", "CVE-2019-0885", "CVE-2019-0889", "CVE-2019-0890", "CVE-2019-0891", "CVE-2019-0893", "CVE-2019-0894", "CVE-2019-0895", "CVE-2019-0896", "CVE-2019-0897", "CVE-2019-0898", "CVE-2019-0899", "CVE-2019-0900", "CVE-2019-0901", "CVE-2019-0902", "CVE-2019-0903", "CVE-2019-0911", "CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0918", "CVE-2019-0921", "CVE-2019-0922", "CVE-2019-0924", "CVE-2019-0930", "CVE-2019-0936", "CVE-2019-0938", "CVE-2019-0940", "CVE-2019-0942", "CVE-2019-0961", "CVE-2019-0980", "CVE-2019-0981", "CVE-2019-11091"], "modified": "2021-11-30T00:00:00", "cpe": ["cpe:/o:microsoft:windows", "cpe:/a:microsoft:edge"], "id": "SMB_NT_MS19_MAY_4499154.NASL", "href": "https://www.tenable.com/plugins/nessus/125062", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from the Microsoft Security Updates API. The text\n# itself is copyright (C) Microsoft Corporation.\n#\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(125062);\n script_version(\"1.12\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/11/30\");\n\n script_cve_id(\n \"CVE-2018-12126\",\n \"CVE-2018-12127\",\n \"CVE-2018-12130\",\n \"CVE-2019-0707\",\n \"CVE-2019-0727\",\n \"CVE-2019-0733\",\n \"CVE-2019-0734\",\n \"CVE-2019-0758\",\n \"CVE-2019-0820\",\n \"CVE-2019-0863\",\n \"CVE-2019-0864\",\n \"CVE-2019-0881\",\n \"CVE-2019-0882\",\n \"CVE-2019-0884\",\n \"CVE-2019-0885\",\n \"CVE-2019-0889\",\n \"CVE-2019-0890\",\n \"CVE-2019-0891\",\n \"CVE-2019-0893\",\n \"CVE-2019-0894\",\n \"CVE-2019-0895\",\n \"CVE-2019-0896\",\n \"CVE-2019-0897\",\n \"CVE-2019-0898\",\n \"CVE-2019-0899\",\n \"CVE-2019-0900\",\n \"CVE-2019-0901\",\n \"CVE-2019-0902\",\n \"CVE-2019-0903\",\n \"CVE-2019-0911\",\n \"CVE-2019-0912\",\n \"CVE-2019-0913\",\n \"CVE-2019-0914\",\n \"CVE-2019-0915\",\n \"CVE-2019-0916\",\n \"CVE-2019-0917\",\n \"CVE-2019-0918\",\n \"CVE-2019-0921\",\n \"CVE-2019-0922\",\n \"CVE-2019-0924\",\n \"CVE-2019-0930\",\n \"CVE-2019-0936\",\n \"CVE-2019-0938\",\n \"CVE-2019-0940\",\n \"CVE-2019-0942\",\n \"CVE-2019-0961\",\n \"CVE-2019-0980\",\n \"CVE-2019-0981\",\n \"CVE-2019-11091\"\n );\n script_xref(name:\"MSKB\", value:\"4499154\");\n script_xref(name:\"MSFT\", value:\"MS19-4499154\");\n script_xref(name:\"CISA-KNOWN-EXPLOITED\", value:\"2022/05/03\");\n\n script_name(english:\"KB4499154: Windows 10 May 2019 Security Update (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)\");\n script_summary(english:\"Checks for rollup.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Windows host is affected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The remote Windows host is missing security update 4499154. \nIt is, therefore, affected by multiple vulnerabilities :\n\n - A new subclass of speculative execution side channel vulnerabilities,\n known as Microarchitectural Data Sampling, exist in Windows.\n An attacker who successfully exploited these vulnerabilities \n may be able to read privileged data across trust boundaries. \n In shared resource environments (such as exists in some cloud \n services configurations), these vulnerabilities could allow \n one virtual machine to improperly access information from \n another. In non-browsing scenarios on standalone systems, an \n attacker would need prior access to the system or an ability \n to run a specially crafted application on the target system \n to leverage these vulnerabilities.\n (CVE-2019-11091, CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)\n\n - A denial of service vulnerability exists when .NET\n Framework and .NET Core improperly process RegEx\n strings. An attacker who successfully exploited this\n vulnerability could cause a denial of service against a\n .NET application. A remote unauthenticated attacker\n could exploit this vulnerability by issuing specially\n crafted requests to a .NET Framework (or .NET core)\n application. The update addresses the vulnerability by\n correcting how .NET Framework and .NET Core applications\n handle RegEx string processing. (CVE-2019-0820)\n\n - A remote code execution vulnerability exists in the way\n that Microsoft browsers access objects in memory. The\n vulnerability could corrupt memory in a way that could\n allow an attacker to execute arbitrary code in the\n context of the current user. An attacker who\n successfully exploited the vulnerability could gain the\n same user rights as the current user. (CVE-2019-0940)\n\n - A remote code execution vulnerability exists when\n Microsoft Windows OLE fails to properly validate user\n input. An attacker could exploit the vulnerability to\n execute malicious code. (CVE-2019-0885)\n\n - An elevation of privilege vulnerability exists when the\n Windows Kernel improperly handles key enumeration. An\n attacker who successfully exploited the vulnerability\n could gain elevated privileges on a targeted system. A\n locally authenticated attacker could exploit this\n vulnerability by running a specially crafted\n application. The security update addresses the\n vulnerability by helping to ensure that the Windows\n Kernel properly handles key enumeration. (CVE-2019-0881)\n\n - A remote code execution vulnerability exists in the way\n that the Chakra scripting engine handles objects in\n memory in Microsoft Edge. The vulnerability could\n corrupt memory in such a way that an attacker could\n execute arbitrary code in the context of the current\n user. An attacker who successfully exploited the\n vulnerability could gain the same user rights as the\n current user. (CVE-2019-0912, CVE-2019-0913,\n CVE-2019-0914, CVE-2019-0915, CVE-2019-0916,\n CVE-2019-0917, CVE-2019-0922, CVE-2019-0924)\n\n - An spoofing vulnerability exists when Internet Explorer\n improperly handles URLs. An attacker who successfully\n exploited this vulnerability could trick a user by\n redirecting the user to a specially crafted website. The\n specially crafted website could either spoof content or\n serve as a pivot to chain an attack with other\n vulnerabilities in web services. (CVE-2019-0921)\n\n - An information disclosure vulnerability exists when\n Internet Explorer improperly handles objects in memory.\n An attacker who successfully exploited the vulnerability\n could obtain information to further compromise the users\n system. (CVE-2019-0930)\n\n - A remote code execution vulnerability exists in the way\n the scripting engine handles objects in memory in\n Microsoft browsers. The vulnerability could corrupt\n memory in such a way that an attacker could execute\n arbitrary code in the context of the current user. An\n attacker who successfully exploited the vulnerability\n could gain the same user rights as the current user.\n (CVE-2019-0884, CVE-2019-0911, CVE-2019-0918)\n\n - A remote code execution vulnerability exists when the\n Windows Jet Database Engine improperly handles objects\n in memory. An attacker who successfully exploited this\n vulnerability could execute arbitrary code on a victim\n system. An attacker could exploit this vulnerability by\n enticing a victim to open a specially crafted file. The\n update addresses the vulnerability by correcting the way\n the Windows Jet Database Engine handles objects in\n memory. (CVE-2019-0889, CVE-2019-0890, CVE-2019-0891,\n CVE-2019-0893, CVE-2019-0894, CVE-2019-0895,\n CVE-2019-0896, CVE-2019-0897, CVE-2019-0898,\n CVE-2019-0899, CVE-2019-0900, CVE-2019-0901,\n CVE-2019-0902)\n\n - A denial of service vulnerability exists when .NET\n Framework improperly handles objects in heap memory. An\n attacker who successfully exploited this vulnerability\n could cause a denial of service against a .NET\n application. (CVE-2019-0864)\n\n - An elevation of privilege vulnerability exists in the\n Unified Write Filter (UWF) feature for Windows 10 when\n it improperly restricts access to the registry. An\n attacker who successfully exploited the vulnerability\n could make changes to the registry keys protected by UWF\n without having administrator privileges.\n (CVE-2019-0942)\n\n - An information disclosure vulnerability exists when the\n Windows GDI component improperly discloses the contents\n of its memory. An attacker who successfully exploited\n the vulnerability could obtain information to further\n compromise the users system. There are multiple ways an\n attacker could exploit the vulnerability, such as by\n convincing a user to open a specially crafted document,\n or by convincing a user to visit an untrusted webpage.\n The security update addresses the vulnerability by\n correcting how the Windows GDI component handles objects\n in memory. (CVE-2019-0758, CVE-2019-0882, CVE-2019-0961)\n\n - An elevation of privilege vulnerability exists in\n Microsoft Edge that could allow an attacker to escape\n from the AppContainer sandbox in the browser. An\n attacker who successfully exploited this vulnerability\n could gain elevated privileges and break out of the Edge\n AppContainer sandbox. The vulnerability by itself does\n not allow arbitrary code to run. However, this\n vulnerability could be used in conjunction with one or\n more vulnerabilities (for example a remote code\n execution vulnerability and another elevation of\n privilege vulnerability) to take advantage of the\n elevated privileges when running. The security update\n addresses the vulnerability by modifying how Microsoft\n Edge handles sandboxing. (CVE-2019-0938)\n\n - An elevation of privilege vulnerability exists in\n Microsoft Windows when Windows fails to properly handle\n certain symbolic links. An attacker who successfully\n exploited this vulnerability could potentially set\n certain items to run at a higher level and thereby\n elevate permissions. (CVE-2019-0936)\n\n - An elevation of privilege vulnerability exists in the\n Network Driver Interface Specification (NDIS) when\n ndis.sys fails to check the length of a buffer prior to\n copying memory to it. (CVE-2019-0707)\n\n - An elevation of privilege vulnerability exists in\n Microsoft Windows when a man-in-the-middle attacker is\n able to successfully decode and replace authentication\n request using Kerberos, allowing an attacker to be\n validated as an Administrator. The update addresses this\n vulnerability by changing how these requests are\n validated. (CVE-2019-0734)\n\n - A security feature bypass vulnerability exists in\n Windows Defender Application Control (WDAC) which could\n allow an attacker to bypass WDAC enforcement. An\n attacker who successfully exploited this vulnerability\n could circumvent Windows PowerShell Constrained Language\n Mode on the machine. (CVE-2019-0733)\n\n - A denial of service vulnerability exists when .NET\n Framework or .NET Core improperly handle web requests.\n An attacker who successfully exploited this\n vulnerability could cause a denial of service against a\n .NET Framework or .NET Core web application. The\n vulnerability can be exploited remotely, without\n authentication. A remote unauthenticated attacker could\n exploit this vulnerability by issuing specially crafted\n requests to the .NET Framework or .NET Core application.\n The update addresses the vulnerability by correcting how\n .NET Framework or .NET Core web applications handles web\n requests. (CVE-2019-0980, CVE-2019-0981)\n\n - An elevation of privilege vulnerability exists in the\n way Windows Error Reporting (WER) handles files. An\n attacker who successfully exploited this vulnerability\n could run arbitrary code in kernel mode. An attacker\n could then install programs; view, change, or delete\n data; or create new accounts with administrator\n privileges. (CVE-2019-0863)\n\n - A remote code execution vulnerability exists in the way\n that the Windows Graphics Device Interface (GDI) handles\n objects in the memory. An attacker who successfully\n exploited this vulnerability could take control of the\n affected system. An attacker could then install\n programs; view, change, or delete data; or create new\n accounts with full user rights. (CVE-2019-0903)\n\n - An elevation of privilege vulnerability exists when the\n Diagnostics Hub Standard Collector or the Visual Studio\n Standard Collector allows file deletion in arbitrary\n locations. (CVE-2019-0727)\");\n # https://support.microsoft.com/en-us/help/4499154/windows-10-update-kb4499154\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?bdb2d327\");\n # https://support.microsoft.com/en-us/help/4072698/windows-server-speculative-execution-side-channel-vulnerabilities-prot\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?8902cebb\");\n script_set_attribute(attribute:\"solution\", value:\n \"Apply Cumulative Update KB4499154.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:H/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2019-0903\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2019/05/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2019/05/14\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2019/05/14\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:microsoft:windows\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:microsoft:edge\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows : Microsoft Bulletins\");\n\n script_copyright(english:\"This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"smb_check_rollup.nasl\", \"smb_hotfixes.nasl\", \"ms_bulletin_checks_possible.nasl\", 'microsoft_windows_env_vars.nasl');\n script_require_keys(\"SMB/MS_Bulletin_Checks/Possible\");\n script_require_ports(139, 445, \"Host/patch_management_checks\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"smb_hotfixes_fcheck.inc\");\ninclude(\"smb_hotfixes.inc\");\ninclude(\"smb_func.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"smb_reg_query.inc\");\n\nget_kb_item_or_exit(\"SMB/MS_Bulletin_Checks/Possible\");\n\nbulletin = \"MS19-05\";\nkbs = make_list('4499154');\n\nif (get_kb_item(\"Host/patch_management_checks\")) hotfix_check_3rd_party(bulletin:bulletin, kbs:kbs, severity:SECURITY_HOLE);\n\nget_kb_item_or_exit(\"SMB/Registry/Enumerated\");\nget_kb_item_or_exit(\"SMB/WindowsVersion\", exit_code:1);\nproductname = get_kb_item_or_exit(\"SMB/ProductName\");\n\nif (hotfix_check_sp_range(win10:'0') <= 0) audit(AUDIT_OS_SP_NOT_VULN);\n\nshare = hotfix_get_systemdrive(as_share:TRUE, exit_on_fail:TRUE);\nif (!is_accessible_share(share:share)) audit(AUDIT_SHARE_FAIL, share);\n\nif (\n smb_check_rollup(os:\"10\",\n sp:0,\n os_build:\"10240\",\n rollup_date:\"05_2019\",\n bulletin:bulletin,\n rollup_kb_list:[4499154])\n)\n{\n replace_kb_item(name:'SMB/Missing/'+bulletin, value:TRUE);\n hotfix_security_hole();\n hotfix_check_fversion_end();\n exit(0);\n}\nelse\n{\n hotfix_check_fversion_end();\n audit(AUDIT_HOST_NOT, hotfix_get_audit_report());\n}\n", "cvss": {"score": 9.3, "vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2022-02-28T13:13:55", "description": "The remote Windows host is missing security update 4499165 or cumulative update 4499151. It is, therefore, affected by multiple vulnerabilities :\n\n - A new subclass of speculative execution side channel vulnerabilities, known as Microarchitectural Data Sampling, exist in Windows.\n An attacker who successfully exploited these vulnerabilities may be able to read privileged data across trust boundaries. In shared resource environments (such as exists in some cloud services configurations), these vulnerabilities could allow one virtual machine to improperly access information from another. In non-browsing scenarios on standalone systems, an attacker would need prior access to the system or an ability to run a specially crafted application on the target system to leverage these vulnerabilities.\n (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091)\n\n - A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to a .NET Framework (or .NET core) application. The update addresses the vulnerability by correcting how .NET Framework and .NET Core applications handle RegEx string processing. (CVE-2019-0820)\n\n - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. (CVE-2019-0940)\n\n - A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input. An attacker could exploit the vulnerability to execute malicious code. (CVE-2019-0885)\n\n - An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system. A locally authenticated attacker could exploit this vulnerability by running a specially crafted application. The security update addresses the vulnerability by helping to ensure that the Windows Kernel properly handles key enumeration. (CVE-2019-0881)\n\n - An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to properly handle certain symbolic links. An attacker who successfully exploited this vulnerability could potentially set certain items to run at a higher level and thereby elevate permissions. (CVE-2019-0936)\n\n - An spoofing vulnerability exists when Internet Explorer improperly handles URLs. An attacker who successfully exploited this vulnerability could trick a user by redirecting the user to a specially crafted website. The specially crafted website could either spoof content or serve as a pivot to chain an attack with other vulnerabilities in web services. (CVE-2019-0921)\n\n - An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. (CVE-2019-0707)\n\n - A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.\n (CVE-2019-0884, CVE-2019-0911, CVE-2019-0918)\n\n - A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory. (CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895, CVE-2019-0896, CVE-2019-0897, CVE-2019-0898, CVE-2019-0899, CVE-2019-0900, CVE-2019-0901, CVE-2019-0902)\n\n - A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could run arbitrary code on the DHCP server. (CVE-2019-0725)\n\n - A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. (CVE-2019-0864)\n\n - An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the users system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.\n The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory. (CVE-2019-0758, CVE-2019-0882, CVE-2019-0961)\n\n - An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.\n An attacker who successfully exploited the vulnerability could obtain information to further compromise the users system. (CVE-2019-0930)\n\n - An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully decode and replace authentication request using Kerberos, allowing an attacker to be validated as an Administrator. The update addresses this vulnerability by changing how these requests are validated. (CVE-2019-0734)\n\n - An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with administrator privileges. (CVE-2019-0863)\n\n - A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests.\n An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Framework or .NET Core web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Framework or .NET Core application.\n The update addresses the vulnerability by correcting how .NET Framework or .NET Core web applications handles web requests. (CVE-2019-0980, CVE-2019-0981)\n\n - A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. (CVE-2019-0903)", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "nessus", "title": "KB4499165: Windows 8.1 and Windows Server 2012 R2 May 2019 Security Update (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-12126", "CVE-2018-12127", "CVE-2018-12130", "CVE-2019-0707", "CVE-2019-0725", "CVE-2019-0734", "CVE-2019-0758", "CVE-2019-0820", "CVE-2019-0863", "CVE-2019-0864", "CVE-2019-0881", "CVE-2019-0882", "CVE-2019-0884", "CVE-2019-0885", "CVE-2019-0889", "CVE-2019-0890", "CVE-2019-0891", "CVE-2019-0893", "CVE-2019-0894", "CVE-2019-0895", "CVE-2019-0896", "CVE-2019-0897", "CVE-2019-0898", "CVE-2019-0899", "CVE-2019-0900", "CVE-2019-0901", "CVE-2019-0902", "CVE-2019-0903", "CVE-2019-0911", "CVE-2019-0918", "CVE-2019-0921", "CVE-2019-0930", "CVE-2019-0936", "CVE-2019-0940", "CVE-2019-0961", "CVE-2019-0980", "CVE-2019-0981", "CVE-2019-11091"], "modified": "2021-11-30T00:00:00", "cpe": ["cpe:/o:microsoft:windows"], "id": "SMB_NT_MS19_MAY_4499151.NASL", "href": "https://www.tenable.com/plugins/nessus/125061", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from the Microsoft Security Updates API. The text\n# itself is copyright (C) Microsoft Corporation.\n#\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(125061);\n script_version(\"1.12\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/11/30\");\n\n script_cve_id(\n \"CVE-2018-12126\",\n \"CVE-2018-12127\",\n \"CVE-2018-12130\",\n \"CVE-2019-0707\",\n \"CVE-2019-0725\",\n \"CVE-2019-0734\",\n \"CVE-2019-0758\",\n \"CVE-2019-0820\",\n \"CVE-2019-0863\",\n \"CVE-2019-0864\",\n \"CVE-2019-0881\",\n \"CVE-2019-0882\",\n \"CVE-2019-0884\",\n \"CVE-2019-0885\",\n \"CVE-2019-0889\",\n \"CVE-2019-0890\",\n \"CVE-2019-0891\",\n \"CVE-2019-0893\",\n \"CVE-2019-0894\",\n \"CVE-2019-0895\",\n \"CVE-2019-0896\",\n \"CVE-2019-0897\",\n \"CVE-2019-0898\",\n \"CVE-2019-0899\",\n \"CVE-2019-0900\",\n \"CVE-2019-0901\",\n \"CVE-2019-0902\",\n \"CVE-2019-0903\",\n \"CVE-2019-0911\",\n \"CVE-2019-0918\",\n \"CVE-2019-0921\",\n \"CVE-2019-0930\",\n \"CVE-2019-0936\",\n \"CVE-2019-0940\",\n \"CVE-2019-0961\",\n \"CVE-2019-0980\",\n \"CVE-2019-0981\",\n \"CVE-2019-11091\"\n );\n script_xref(name:\"MSKB\", value:\"4499151\");\n script_xref(name:\"MSKB\", value:\"4499165\");\n script_xref(name:\"MSFT\", value:\"MS19-4499151\");\n script_xref(name:\"MSFT\", value:\"MS19-4499165\");\n script_xref(name:\"CISA-KNOWN-EXPLOITED\", value:\"2022/05/03\");\n\n script_name(english:\"KB4499165: Windows 8.1 and Windows Server 2012 R2 May 2019 Security Update (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)\");\n script_summary(english:\"Checks for rollup.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Windows host is affected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The remote Windows host is missing security update 4499165\nor cumulative update 4499151. It is, therefore, affected by\nmultiple vulnerabilities :\n\n - A new subclass of speculative execution side channel vulnerabilities,\n known as Microarchitectural Data Sampling, exist in Windows.\n An attacker who successfully exploited these vulnerabilities \n may be able to read privileged data across trust boundaries. \n In shared resource environments (such as exists in some cloud \n services configurations), these vulnerabilities could allow \n one virtual machine to improperly access information from \n another. In non-browsing scenarios on standalone systems, an \n attacker would need prior access to the system or an ability \n to run a specially crafted application on the target system \n to leverage these vulnerabilities.\n (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091)\n\n - A denial of service vulnerability exists when .NET\n Framework and .NET Core improperly process RegEx\n strings. An attacker who successfully exploited this\n vulnerability could cause a denial of service against a\n .NET application. A remote unauthenticated attacker\n could exploit this vulnerability by issuing specially\n crafted requests to a .NET Framework (or .NET core)\n application. The update addresses the vulnerability by\n correcting how .NET Framework and .NET Core applications\n handle RegEx string processing. (CVE-2019-0820)\n\n - A remote code execution vulnerability exists in the way\n that Microsoft browsers access objects in memory. The\n vulnerability could corrupt memory in a way that could\n allow an attacker to execute arbitrary code in the\n context of the current user. An attacker who\n successfully exploited the vulnerability could gain the\n same user rights as the current user. (CVE-2019-0940)\n\n - A remote code execution vulnerability exists when\n Microsoft Windows OLE fails to properly validate user\n input. An attacker could exploit the vulnerability to\n execute malicious code. (CVE-2019-0885)\n\n - An elevation of privilege vulnerability exists when the\n Windows Kernel improperly handles key enumeration. An\n attacker who successfully exploited the vulnerability\n could gain elevated privileges on a targeted system. A\n locally authenticated attacker could exploit this\n vulnerability by running a specially crafted\n application. The security update addresses the\n vulnerability by helping to ensure that the Windows\n Kernel properly handles key enumeration. (CVE-2019-0881)\n\n - An elevation of privilege vulnerability exists in\n Microsoft Windows when Windows fails to properly handle\n certain symbolic links. An attacker who successfully\n exploited this vulnerability could potentially set\n certain items to run at a higher level and thereby\n elevate permissions. (CVE-2019-0936)\n\n - An spoofing vulnerability exists when Internet Explorer\n improperly handles URLs. An attacker who successfully\n exploited this vulnerability could trick a user by\n redirecting the user to a specially crafted website. The\n specially crafted website could either spoof content or\n serve as a pivot to chain an attack with other\n vulnerabilities in web services. (CVE-2019-0921)\n\n - An elevation of privilege vulnerability exists in the\n Network Driver Interface Specification (NDIS) when\n ndis.sys fails to check the length of a buffer prior to\n copying memory to it. (CVE-2019-0707)\n\n - A remote code execution vulnerability exists in the way\n the scripting engine handles objects in memory in\n Microsoft browsers. The vulnerability could corrupt\n memory in such a way that an attacker could execute\n arbitrary code in the context of the current user. An\n attacker who successfully exploited the vulnerability\n could gain the same user rights as the current user.\n (CVE-2019-0884, CVE-2019-0911, CVE-2019-0918)\n\n - A remote code execution vulnerability exists when the\n Windows Jet Database Engine improperly handles objects\n in memory. An attacker who successfully exploited this\n vulnerability could execute arbitrary code on a victim\n system. An attacker could exploit this vulnerability by\n enticing a victim to open a specially crafted file. The\n update addresses the vulnerability by correcting the way\n the Windows Jet Database Engine handles objects in\n memory. (CVE-2019-0889, CVE-2019-0890, CVE-2019-0891,\n CVE-2019-0893, CVE-2019-0894, CVE-2019-0895,\n CVE-2019-0896, CVE-2019-0897, CVE-2019-0898,\n CVE-2019-0899, CVE-2019-0900, CVE-2019-0901,\n CVE-2019-0902)\n\n - A memory corruption vulnerability exists in the Windows\n Server DHCP service when processing specially crafted\n packets. An attacker who successfully exploited the\n vulnerability could run arbitrary code on the DHCP\n server. (CVE-2019-0725)\n\n - A denial of service vulnerability exists when .NET\n Framework improperly handles objects in heap memory. An\n attacker who successfully exploited this vulnerability\n could cause a denial of service against a .NET\n application. (CVE-2019-0864)\n\n - An information disclosure vulnerability exists when the\n Windows GDI component improperly discloses the contents\n of its memory. An attacker who successfully exploited\n the vulnerability could obtain information to further\n compromise the users system. There are multiple ways an\n attacker could exploit the vulnerability, such as by\n convincing a user to open a specially crafted document,\n or by convincing a user to visit an untrusted webpage.\n The security update addresses the vulnerability by\n correcting how the Windows GDI component handles objects\n in memory. (CVE-2019-0758, CVE-2019-0882, CVE-2019-0961)\n\n - An information disclosure vulnerability exists when\n Internet Explorer improperly handles objects in memory.\n An attacker who successfully exploited the vulnerability\n could obtain information to further compromise the users\n system. (CVE-2019-0930)\n\n - An elevation of privilege vulnerability exists in\n Microsoft Windows when a man-in-the-middle attacker is\n able to successfully decode and replace authentication\n request using Kerberos, allowing an attacker to be\n validated as an Administrator. The update addresses this\n vulnerability by changing how these requests are\n validated. (CVE-2019-0734)\n\n - An elevation of privilege vulnerability exists in the\n way Windows Error Reporting (WER) handles files. An\n attacker who successfully exploited this vulnerability\n could run arbitrary code in kernel mode. An attacker\n could then install programs; view, change, or delete\n data; or create new accounts with administrator\n privileges. (CVE-2019-0863)\n\n - A denial of service vulnerability exists when .NET\n Framework or .NET Core improperly handle web requests.\n An attacker who successfully exploited this\n vulnerability could cause a denial of service against a\n .NET Framework or .NET Core web application. The\n vulnerability can be exploited remotely, without\n authentication. A remote unauthenticated attacker could\n exploit this vulnerability by issuing specially crafted\n requests to the .NET Framework or .NET Core application.\n The update addresses the vulnerability by correcting how\n .NET Framework or .NET Core web applications handles web\n requests. (CVE-2019-0980, CVE-2019-0981)\n\n - A remote code execution vulnerability exists in the way\n that the Windows Graphics Device Interface (GDI) handles\n objects in the memory. An attacker who successfully\n exploited this vulnerability could take control of the\n affected system. An attacker could then install\n programs; view, change, or delete data; or create new\n accounts with full user rights. (CVE-2019-0903)\");\n # https://support.microsoft.com/en-us/help/4499151/windows-8-1-update-kb4499151\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?f1eae74c\");\n # https://support.microsoft.com/en-us/help/4499165/windows-8-1-update-kb4499165\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?9defcbe8\");\n # https://support.microsoft.com/en-us/help/4072698/windows-server-speculative-execution-side-channel-vulnerabilities-prot\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?8902cebb\");\n # https://community.tenable.com/s/article/Speculative-Execution-Side-Channel-Vulnerability-Plugin-and-Mitigation-Information\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?7b2b84b8\");\n script_set_attribute(attribute:\"solution\", value:\n\"Apply Security Only update KB4499165 or Cumulative Update KB4499151.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:H/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2019-0903\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2019/05/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2019/05/14\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2019/05/14\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:microsoft:windows\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows : Microsoft Bulletins\");\n\n script_copyright(english:\"This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"smb_check_rollup.nasl\", \"smb_hotfixes.nasl\", \"ms_bulletin_checks_possible.nasl\", 'microsoft_windows_env_vars.nasl');\n script_require_keys(\"SMB/MS_Bulletin_Checks/Possible\");\n script_require_ports(139, 445, \"Host/patch_management_checks\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"smb_hotfixes_fcheck.inc\");\ninclude(\"smb_hotfixes.inc\");\ninclude(\"smb_func.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"smb_reg_query.inc\");\n\nget_kb_item_or_exit(\"SMB/MS_Bulletin_Checks/Possible\");\n\nbulletin = \"MS19-05\";\nkbs = make_list('4499151', '4499165');\n\nif (get_kb_item(\"Host/patch_management_checks\")) hotfix_check_3rd_party(bulletin:bulletin, kbs:kbs, severity:SECURITY_HOLE);\n\nget_kb_item_or_exit(\"SMB/Registry/Enumerated\");\nget_kb_item_or_exit(\"SMB/WindowsVersion\", exit_code:1);\n\nif (hotfix_check_sp_range(win81:'0') <= 0) audit(AUDIT_OS_SP_NOT_VULN);\n\n# Windows 8 EOL\nproductname = get_kb_item_or_exit(\"SMB/ProductName\", exit_code:1);\nif (\"Windows 8\" >< productname && \"8.1\" >!< productname)\n audit(AUDIT_OS_SP_NOT_VULN);\n\nshare = hotfix_get_systemdrive(as_share:TRUE, exit_on_fail:TRUE);\nif (!is_accessible_share(share:share)) audit(AUDIT_SHARE_FAIL, share);\n\nif (\n smb_check_rollup(os:\"6.3\",\n sp:0,\n rollup_date:\"05_2019\",\n bulletin:bulletin,\n rollup_kb_list:[4499151, 4499165])\n)\n{\n replace_kb_item(name:'SMB/Missing/'+bulletin, value:TRUE);\n hotfix_security_hole();\n hotfix_check_fversion_end();\n exit(0);\n}\nelse\n{\n hotfix_check_fversion_end();\n audit(AUDIT_HOST_NOT, hotfix_get_audit_report());\n}\n", "cvss": {"score": 9.3, "vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-12-23T02:32:36", "description": "The remote Windows host is missing security update 4499175 or cumulative update 4499164. It is, therefore, affected by multiple vulnerabilities :\n\n - A new subclass of speculative execution side channel vulnerabilities, known as Microarchitectural Data Sampling, exist in Windows.\n An attacker who successfully exploited these vulnerabilities may be able to read privileged data across trust boundaries. In shared resource environments (such as exists in some cloud services configurations), these vulnerabilities could allow one virtual machine to improperly access information from another. In non-browsing scenarios on standalone systems, an attacker would need prior access to the system or an ability to run a specially crafted application on the target system to leverage these vulnerabilities.\n (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091)\n\n - A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to a .NET Framework (or .NET core) application. The update addresses the vulnerability by correcting how .NET Framework and .NET Core applications handle RegEx string processing. (CVE-2019-0820)\n\n - A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input. An attacker could exploit the vulnerability to execute malicious code. (CVE-2019-0885)\n\n - An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system. A locally authenticated attacker could exploit this vulnerability by running a specially crafted application. The security update addresses the vulnerability by helping to ensure that the Windows Kernel properly handles key enumeration. (CVE-2019-0881)\n\n - An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to properly handle certain symbolic links. An attacker who successfully exploited this vulnerability could potentially set certain items to run at a higher level and thereby elevate permissions. (CVE-2019-0936)\n\n - An spoofing vulnerability exists when Internet Explorer improperly handles URLs. An attacker who successfully exploited this vulnerability could trick a user by redirecting the user to a specially crafted website. The specially crafted website could either spoof content or serve as a pivot to chain an attack with other vulnerabilities in web services. (CVE-2019-0921)\n\n - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. (CVE-2019-0940)\n\n - A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.\n (CVE-2019-0884, CVE-2019-0911, CVE-2019-0918)\n\n - A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory. (CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895, CVE-2019-0896, CVE-2019-0897, CVE-2019-0898, CVE-2019-0899, CVE-2019-0900, CVE-2019-0901, CVE-2019-0902)\n\n - A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could run arbitrary code on the DHCP server. (CVE-2019-0725)\n\n - A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. (CVE-2019-0864)\n\n - A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests.\n This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs;\n view, change, or delete data; or create new accounts with full user rights. (CVE-2019-0708)\n\n - An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the users system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.\n The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory. (CVE-2019-0758, CVE-2019-0882, CVE-2019-0961)\n\n - An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.\n An attacker who successfully exploited the vulnerability could obtain information to further compromise the users system. (CVE-2019-0930)\n\n - An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully decode and replace authentication request using Kerberos, allowing an attacker to be validated as an Administrator. The update addresses this vulnerability by changing how these requests are validated. (CVE-2019-0734)\n\n - An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with administrator privileges. (CVE-2019-0863)\n\n - A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests.\n An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Framework or .NET Core web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Framework or .NET Core application.\n The update addresses the vulnerability by correcting how .NET Framework or .NET Core web applications handles web requests. (CVE-2019-0980, CVE-2019-0981)\n\n - A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. (CVE-2019-0903)", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "nessus", "title": "KB4499175: Windows 7 and Windows Server 2008 R2 May 2019 Security Update (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout) (BlueKeep)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-12126", "CVE-2018-12127", "CVE-2018-12130", "CVE-2019-0708", "CVE-2019-0725", "CVE-2019-0734", "CVE-2019-0758", "CVE-2019-0820", "CVE-2019-0863", "CVE-2019-0864", "CVE-2019-0881", "CVE-2019-0882", "CVE-2019-0884", "CVE-2019-0885", "CVE-2019-0889", "CVE-2019-0890", "CVE-2019-0891", "CVE-2019-0893", "CVE-2019-0894", "CVE-2019-0895", "CVE-2019-0896", "CVE-2019-0897", "CVE-2019-0898", "CVE-2019-0899", "CVE-2019-0900", "CVE-2019-0901", "CVE-2019-0902", "CVE-2019-0903", "CVE-2019-0911", "CVE-2019-0918", "CVE-2019-0921", "CVE-2019-0930", "CVE-2019-0936", "CVE-2019-0940", "CVE-2019-0961", "CVE-2019-0980", "CVE-2019-0981", "CVE-2019-11091"], "modified": "2021-11-30T00:00:00", "cpe": ["cpe:/o:microsoft:windows"], "id": "SMB_NT_MS19_MAY_4499164.NASL", "href": "https://www.tenable.com/plugins/nessus/125063", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from the Microsoft Security Updates API. The text\n# itself is copyright (C) Microsoft Corporation.\n#\n\ninclude('compat.inc');\n\nif (description)\n{\n script_id(125063);\n script_version(\"1.17\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/11/30\");\n\n script_cve_id(\n \"CVE-2018-12126\",\n \"CVE-2018-12127\",\n \"CVE-2018-12130\",\n \"CVE-2019-0708\",\n \"CVE-2019-0725\",\n \"CVE-2019-0734\",\n \"CVE-2019-0758\",\n \"CVE-2019-0820\",\n \"CVE-2019-0863\",\n \"CVE-2019-0864\",\n \"CVE-2019-0881\",\n \"CVE-2019-0882\",\n \"CVE-2019-0884\",\n \"CVE-2019-0885\",\n \"CVE-2019-0889\",\n \"CVE-2019-0890\",\n \"CVE-2019-0891\",\n \"CVE-2019-0893\",\n \"CVE-2019-0894\",\n \"CVE-2019-0895\",\n \"CVE-2019-0896\",\n \"CVE-2019-0897\",\n \"CVE-2019-0898\",\n \"CVE-2019-0899\",\n \"CVE-2019-0900\",\n \"CVE-2019-0901\",\n \"CVE-2019-0902\",\n \"CVE-2019-0903\",\n \"CVE-2019-0911\",\n \"CVE-2019-0918\",\n \"CVE-2019-0921\",\n \"CVE-2019-0930\",\n \"CVE-2019-0936\",\n \"CVE-2019-0940\",\n \"CVE-2019-0961\",\n \"CVE-2019-0980\",\n \"CVE-2019-0981\",\n \"CVE-2019-11091\"\n );\n script_xref(name:\"MSKB\", value:\"4499164\");\n script_xref(name:\"MSKB\", value:\"4499175\");\n script_xref(name:\"MSFT\", value:\"MS19-4499164\");\n script_xref(name:\"MSFT\", value:\"MS19-4499175\");\n script_xref(name:\"CISA-KNOWN-EXPLOITED\", value:\"2022/05/03\");\n\n script_name(english:\"KB4499175: Windows 7 and Windows Server 2008 R2 May 2019 Security Update (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout) (BlueKeep)\");\n script_summary(english:\"Checks for rollup.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Windows host is affected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The remote Windows host is missing security update 4499175\nor cumulative update 4499164. It is, therefore, affected by\nmultiple vulnerabilities :\n\n - A new subclass of speculative execution side channel vulnerabilities,\n known as Microarchitectural Data Sampling, exist in Windows.\n An attacker who successfully exploited these vulnerabilities \n may be able to read privileged data across trust boundaries. \n In shared resource environments (such as exists in some cloud \n services configurations), these vulnerabilities could allow \n one virtual machine to improperly access information from \n another. In non-browsing scenarios on standalone systems, an \n attacker would need prior access to the system or an ability \n to run a specially crafted application on the target system \n to leverage these vulnerabilities.\n (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091)\n\n - A denial of service vulnerability exists when .NET\n Framework and .NET Core improperly process RegEx\n strings. An attacker who successfully exploited this\n vulnerability could cause a denial of service against a\n .NET application. A remote unauthenticated attacker\n could exploit this vulnerability by issuing specially\n crafted requests to a .NET Framework (or .NET core)\n application. The update addresses the vulnerability by\n correcting how .NET Framework and .NET Core applications\n handle RegEx string processing. (CVE-2019-0820)\n\n - A remote code execution vulnerability exists when\n Microsoft Windows OLE fails to properly validate user\n input. An attacker could exploit the vulnerability to\n execute malicious code. (CVE-2019-0885)\n\n - An elevation of privilege vulnerability exists when the\n Windows Kernel improperly handles key enumeration. An\n attacker who successfully exploited the vulnerability\n could gain elevated privileges on a targeted system. A\n locally authenticated attacker could exploit this\n vulnerability by running a specially crafted\n application. The security update addresses the\n vulnerability by helping to ensure that the Windows\n Kernel properly handles key enumeration. (CVE-2019-0881)\n\n - An elevation of privilege vulnerability exists in\n Microsoft Windows when Windows fails to properly handle\n certain symbolic links. An attacker who successfully\n exploited this vulnerability could potentially set\n certain items to run at a higher level and thereby\n elevate permissions. (CVE-2019-0936)\n\n - An spoofing vulnerability exists when Internet Explorer\n improperly handles URLs. An attacker who successfully\n exploited this vulnerability could trick a user by\n redirecting the user to a specially crafted website. The\n specially crafted website could either spoof content or\n serve as a pivot to chain an attack with other\n vulnerabilities in web services. (CVE-2019-0921)\n\n - A remote code execution vulnerability exists in the way\n that Microsoft browsers access objects in memory. The\n vulnerability could corrupt memory in a way that could\n allow an attacker to execute arbitrary code in the\n context of the current user. An attacker who\n successfully exploited the vulnerability could gain the\n same user rights as the current user. (CVE-2019-0940)\n\n - A remote code execution vulnerability exists in the way\n the scripting engine handles objects in memory in\n Microsoft browsers. The vulnerability could corrupt\n memory in such a way that an attacker could execute\n arbitrary code in the context of the current user. An\n attacker who successfully exploited the vulnerability\n could gain the same user rights as the current user.\n (CVE-2019-0884, CVE-2019-0911, CVE-2019-0918)\n\n - A remote code execution vulnerability exists when the\n Windows Jet Database Engine improperly handles objects\n in memory. An attacker who successfully exploited this\n vulnerability could execute arbitrary code on a victim\n system. An attacker could exploit this vulnerability by\n enticing a victim to open a specially crafted file. The\n update addresses the vulnerability by correcting the way\n the Windows Jet Database Engine handles objects in\n memory. (CVE-2019-0889, CVE-2019-0890, CVE-2019-0891,\n CVE-2019-0893, CVE-2019-0894, CVE-2019-0895,\n CVE-2019-0896, CVE-2019-0897, CVE-2019-0898,\n CVE-2019-0899, CVE-2019-0900, CVE-2019-0901,\n CVE-2019-0902)\n\n - A memory corruption vulnerability exists in the Windows\n Server DHCP service when processing specially crafted\n packets. An attacker who successfully exploited the\n vulnerability could run arbitrary code on the DHCP\n server. (CVE-2019-0725)\n\n - A denial of service vulnerability exists when .NET\n Framework improperly handles objects in heap memory. An\n attacker who successfully exploited this vulnerability\n could cause a denial of service against a .NET\n application. (CVE-2019-0864)\n\n - A remote code execution vulnerability exists in Remote\n Desktop Services formerly known as Terminal Services\n when an unauthenticated attacker connects to the target\n system using RDP and sends specially crafted requests.\n This vulnerability is pre-authentication and requires no\n user interaction. An attacker who successfully exploited\n this vulnerability could execute arbitrary code on the\n target system. An attacker could then install programs;\n view, change, or delete data; or create new accounts\n with full user rights. (CVE-2019-0708)\n\n - An information disclosure vulnerability exists when the\n Windows GDI component improperly discloses the contents\n of its memory. An attacker who successfully exploited\n the vulnerability could obtain information to further\n compromise the users system. There are multiple ways an\n attacker could exploit the vulnerability, such as by\n convincing a user to open a specially crafted document,\n or by convincing a user to visit an untrusted webpage.\n The security update addresses the vulnerability by\n correcting how the Windows GDI component handles objects\n in memory. (CVE-2019-0758, CVE-2019-0882, CVE-2019-0961)\n\n - An information disclosure vulnerability exists when\n Internet Explorer improperly handles objects in memory.\n An attacker who successfully exploited the vulnerability\n could obtain information to further compromise the users\n system. (CVE-2019-0930)\n\n - An elevation of privilege vulnerability exists in\n Microsoft Windows when a man-in-the-middle attacker is\n able to successfully decode and replace authentication\n request using Kerberos, allowing an attacker to be\n validated as an Administrator. The update addresses this\n vulnerability by changing how these requests are\n validated. (CVE-2019-0734)\n\n - An elevation of privilege vulnerability exists in the\n way Windows Error Reporting (WER) handles files. An\n attacker who successfully exploited this vulnerability\n could run arbitrary code in kernel mode. An attacker\n could then install programs; view, change, or delete\n data; or create new accounts with administrator\n privileges. (CVE-2019-0863)\n\n - A denial of service vulnerability exists when .NET\n Framework or .NET Core improperly handle web requests.\n An attacker who successfully exploited this\n vulnerability could cause a denial of service against a\n .NET Framework or .NET Core web application. The\n vulnerability can be exploited remotely, without\n authentication. A remote unauthenticated attacker could\n exploit this vulnerability by issuing specially crafted\n requests to the .NET Framework or .NET Core application.\n The update addresses the vulnerability by correcting how\n .NET Framework or .NET Core web applications handles web\n requests. (CVE-2019-0980, CVE-2019-0981)\n\n - A remote code execution vulnerability exists in the way\n that the Windows Graphics Device Interface (GDI) handles\n objects in the memory. An attacker who successfully\n exploited this vulnerability could take control of the\n affected system. An attacker could then install\n programs; view, change, or delete data; or create new\n accounts with full user rights. (CVE-2019-0903)\");\n # https://support.microsoft.com/en-us/help/4499164/windows-7-update-kb4499164\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?283578f0\");\n # https://support.microsoft.com/en-us/help/4499175/windows-7-update-kb4499175\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?0eea1c91\");\n # https://support.microsoft.com/en-us/help/4072698/windows-server-speculative-execution-side-channel-vulnerabilities-prot\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?8902cebb\");\n # https://community.tenable.com/s/article/Speculative-Execution-Side-Channel-Vulnerability-Plugin-and-Mitigation-Information\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?7b2b84b8\");\n script_set_attribute(attribute:\"solution\", value:\n\"Apply Security Only update KB4499175 or Cumulative Update KB4499164.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:H/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2019-0708\");\n\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_core\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n script_set_attribute(attribute:\"metasploit_name\", value:'CVE-2019-0708 BlueKeep RDP Remote Windows Kernel Use After Free');\n script_set_attribute(attribute:\"exploit_framework_metasploit\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_canvas\", value:\"true\");\n script_set_attribute(attribute:\"canvas_package\", value:\"CANVAS\");\n script_set_attribute(attribute:\"in_the_news\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2019/05/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2019/05/14\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2019/05/14\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:microsoft:windows\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows : Microsoft Bulletins\");\n\n script_copyright(english:\"This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"smb_check_rollup.nasl\", \"smb_hotfixes.nasl\", \"ms_bulletin_checks_possible.nasl\", \"microsoft_windows_env_vars.nasl\");\n script_require_keys(\"SMB/MS_Bulletin_Checks/Possible\");\n script_require_ports(139, 445, \"Host/patch_management_checks\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"smb_hotfixes_fcheck.inc\");\ninclude(\"smb_hotfixes.inc\");\ninclude(\"smb_func.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"smb_reg_query.inc\");\n\nget_kb_item_or_exit(\"SMB/MS_Bulletin_Checks/Possible\");\n\nbulletin = \"MS19-05\";\nkbs = make_list('4499164', '4499175');\n\nif (get_kb_item(\"Host/patch_management_checks\")) hotfix_check_3rd_party(bulletin:bulletin, kbs:kbs, severity:SECURITY_HOLE);\n\nget_kb_item_or_exit(\"SMB/Registry/Enumerated\");\nget_kb_item_or_exit(\"SMB/WindowsVersion\", exit_code:1);\nproductname = get_kb_item_or_exit(\"SMB/ProductName\");\n\nif (hotfix_check_sp_range(win7:'1') <= 0) audit(AUDIT_OS_SP_NOT_VULN);\n\nshare = hotfix_get_systemdrive(as_share:TRUE, exit_on_fail:TRUE);\nif (!is_accessible_share(share:share)) audit(AUDIT_SHARE_FAIL, share);\n\nif (\n smb_check_rollup(os:\"6.1\",\n sp:1,\n rollup_date:\"05_2019\",\n bulletin:bulletin,\n rollup_kb_list:[4499164, 4499175])\n)\n{\n replace_kb_item(name:'SMB/Missing/'+bulletin, value:TRUE);\n hotfix_security_hole();\n hotfix_check_fversion_end();\n exit(0);\n}\nelse\n{\n hotfix_check_fversion_end();\n audit(AUDIT_HOST_NOT, hotfix_get_audit_report());\n}\n", "cvss": {"score": 10, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2022-02-28T13:15:35", "description": "The remote Windows host is missing security update 4499158 or cumulative update 4499171. It is, therefore, affected by multiple vulnerabilities :\n\n - A new subclass of speculative execution side channel vulnerabilities, known as Microarchitectural Data Sampling, exist in Windows.\n An attacker who successfully exploited these vulnerabilities may be able to read privileged data across trust boundaries. In shared resource environments (such as exists in some cloud services configurations), these vulnerabilities could allow one virtual machine to improperly access information from another. In non-browsing scenarios on standalone systems, an attacker would need prior access to the system or an ability to run a specially crafted application on the target system to leverage these vulnerabilities.\n (CVE-2019-11091, CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)\n\n - A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to a .NET Framework (or .NET core) application. The update addresses the vulnerability by correcting how .NET Framework and .NET Core applications handle RegEx string processing. (CVE-2019-0820)\n\n - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. (CVE-2019-0940)\n\n - A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input. An attacker could exploit the vulnerability to execute malicious code. (CVE-2019-0885)\n\n - An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system. A locally authenticated attacker could exploit this vulnerability by running a specially crafted application. The security update addresses the vulnerability by helping to ensure that the Windows Kernel properly handles key enumeration. (CVE-2019-0881)\n\n - An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to properly handle certain symbolic links. An attacker who successfully exploited this vulnerability could potentially set certain items to run at a higher level and thereby elevate permissions. (CVE-2019-0936)\n\n - An spoofing vulnerability exists when Internet Explorer improperly handles URLs. An attacker who successfully exploited this vulnerability could trick a user by redirecting the user to a specially crafted website. The specially crafted website could either spoof content or serve as a pivot to chain an attack with other vulnerabilities in web services. (CVE-2019-0921)\n\n - An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. (CVE-2019-0707)\n\n - A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.\n (CVE-2019-0884, CVE-2019-0911, CVE-2019-0918)\n\n - A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory. (CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895, CVE-2019-0896, CVE-2019-0897, CVE-2019-0898, CVE-2019-0899, CVE-2019-0900, CVE-2019-0901, CVE-2019-0902)\n\n - A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could run arbitrary code on the DHCP server. (CVE-2019-0725)\n\n - A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. (CVE-2019-0864)\n\n - An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the users system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.\n The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory. (CVE-2019-0758, CVE-2019-0882, CVE-2019-0961)\n\n - An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.\n An attacker who successfully exploited the vulnerability could obtain information to further compromise the users system. (CVE-2019-0930)\n\n - An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully decode and replace authentication request using Kerberos, allowing an attacker to be validated as an Administrator. The update addresses this vulnerability by changing how these requests are validated. (CVE-2019-0734)\n\n - An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with administrator privileges. (CVE-2019-0863)\n\n - A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests.\n An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Framework or .NET Core web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Framework or .NET Core application.\n The update addresses the vulnerability by correcting how .NET Framework or .NET Core web applications handles web requests. (CVE-2019-0980, CVE-2019-0981)\n\n - A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. (CVE-2019-0903)", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "nessus", "title": "KB4499158: Windows Server 2012 May 2019 Security Update (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-12126", "CVE-2018-12127", "CVE-2018-12130", "CVE-2019-0707", "CVE-2019-0725", "CVE-2019-0734", "CVE-2019-0758", "CVE-2019-0820", "CVE-2019-0863", "CVE-2019-0864", "CVE-2019-0881", "CVE-2019-0882", "CVE-2019-0884", "CVE-2019-0885", "CVE-2019-0889", "CVE-2019-0890", "CVE-2019-0891", "CVE-2019-0893", "CVE-2019-0894", "CVE-2019-0895", "CVE-2019-0896", "CVE-2019-0897", "CVE-2019-0898", "CVE-2019-0899", "CVE-2019-0900", "CVE-2019-0901", "CVE-2019-0902", "CVE-2019-0903", "CVE-2019-0911", "CVE-2019-0918", "CVE-2019-0921", "CVE-2019-0930", "CVE-2019-0936", "CVE-2019-0940", "CVE-2019-0961", "CVE-2019-0980", "CVE-2019-0981", "CVE-2019-11091"], "modified": "2021-11-30T00:00:00", "cpe": ["cpe:/o:microsoft:windows"], "id": "SMB_NT_MS19_MAY_4499171.NASL", "href": "https://www.tenable.com/plugins/nessus/125065", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from the Microsoft Security Updates API. The text\n# itself is copyright (C) Microsoft Corporation.\n#\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(125065);\n script_version(\"1.11\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/11/30\");\n\n script_cve_id(\n \"CVE-2018-12126\",\n \"CVE-2018-12127\",\n \"CVE-2018-12130\",\n \"CVE-2019-0707\",\n \"CVE-2019-0725\",\n \"CVE-2019-0734\",\n \"CVE-2019-0758\",\n \"CVE-2019-0820\",\n \"CVE-2019-0863\",\n \"CVE-2019-0864\",\n \"CVE-2019-0881\",\n \"CVE-2019-0882\",\n \"CVE-2019-0884\",\n \"CVE-2019-0885\",\n \"CVE-2019-0889\",\n \"CVE-2019-0890\",\n \"CVE-2019-0891\",\n \"CVE-2019-0893\",\n \"CVE-2019-0894\",\n \"CVE-2019-0895\",\n \"CVE-2019-0896\",\n \"CVE-2019-0897\",\n \"CVE-2019-0898\",\n \"CVE-2019-0899\",\n \"CVE-2019-0900\",\n \"CVE-2019-0901\",\n \"CVE-2019-0902\",\n \"CVE-2019-0903\",\n \"CVE-2019-0911\",\n \"CVE-2019-0918\",\n \"CVE-2019-0921\",\n \"CVE-2019-0930\",\n \"CVE-2019-0936\",\n \"CVE-2019-0940\",\n \"CVE-2019-0961\",\n \"CVE-2019-0980\",\n \"CVE-2019-0981\",\n \"CVE-2019-11091\"\n );\n script_xref(name:\"MSKB\", value:\"4499171\");\n script_xref(name:\"MSKB\", value:\"4499158\");\n script_xref(name:\"MSFT\", value:\"MS19-4499171\");\n script_xref(name:\"MSFT\", value:\"MS19-4499158\");\n script_xref(name:\"CISA-KNOWN-EXPLOITED\", value:\"2022/05/03\");\n\n script_name(english:\"KB4499158: Windows Server 2012 May 2019 Security Update (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)\");\n script_summary(english:\"Checks for rollup.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Windows host is affected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The remote Windows host is missing security update 4499158\nor cumulative update 4499171. It is, therefore, affected by\nmultiple vulnerabilities :\n\n - A new subclass of speculative execution side channel vulnerabilities,\n known as Microarchitectural Data Sampling, exist in Windows.\n An attacker who successfully exploited these vulnerabilities \n may be able to read privileged data across trust boundaries. \n In shared resource environments (such as exists in some cloud \n services configurations), these vulnerabilities could allow \n one virtual machine to improperly access information from \n another. In non-browsing scenarios on standalone systems, an \n attacker would need prior access to the system or an ability \n to run a specially crafted application on the target system \n to leverage these vulnerabilities.\n (CVE-2019-11091, CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)\n\n - A denial of service vulnerability exists when .NET\n Framework and .NET Core improperly process RegEx\n strings. An attacker who successfully exploited this\n vulnerability could cause a denial of service against a\n .NET application. A remote unauthenticated attacker\n could exploit this vulnerability by issuing specially\n crafted requests to a .NET Framework (or .NET core)\n application. The update addresses the vulnerability by\n correcting how .NET Framework and .NET Core applications\n handle RegEx string processing. (CVE-2019-0820)\n\n - A remote code execution vulnerability exists in the way\n that Microsoft browsers access objects in memory. The\n vulnerability could corrupt memory in a way that could\n allow an attacker to execute arbitrary code in the\n context of the current user. An attacker who\n successfully exploited the vulnerability could gain the\n same user rights as the current user. (CVE-2019-0940)\n\n - A remote code execution vulnerability exists when\n Microsoft Windows OLE fails to properly validate user\n input. An attacker could exploit the vulnerability to\n execute malicious code. (CVE-2019-0885)\n\n - An elevation of privilege vulnerability exists when the\n Windows Kernel improperly handles key enumeration. An\n attacker who successfully exploited the vulnerability\n could gain elevated privileges on a targeted system. A\n locally authenticated attacker could exploit this\n vulnerability by running a specially crafted\n application. The security update addresses the\n vulnerability by helping to ensure that the Windows\n Kernel properly handles key enumeration. (CVE-2019-0881)\n\n - An elevation of privilege vulnerability exists in\n Microsoft Windows when Windows fails to properly handle\n certain symbolic links. An attacker who successfully\n exploited this vulnerability could potentially set\n certain items to run at a higher level and thereby\n elevate permissions. (CVE-2019-0936)\n\n - An spoofing vulnerability exists when Internet Explorer\n improperly handles URLs. An attacker who successfully\n exploited this vulnerability could trick a user by\n redirecting the user to a specially crafted website. The\n specially crafted website could either spoof content or\n serve as a pivot to chain an attack with other\n vulnerabilities in web services. (CVE-2019-0921)\n\n - An elevation of privilege vulnerability exists in the\n Network Driver Interface Specification (NDIS) when\n ndis.sys fails to check the length of a buffer prior to\n copying memory to it. (CVE-2019-0707)\n\n - A remote code execution vulnerability exists in the way\n the scripting engine handles objects in memory in\n Microsoft browsers. The vulnerability could corrupt\n memory in such a way that an attacker could execute\n arbitrary code in the context of the current user. An\n attacker who successfully exploited the vulnerability\n could gain the same user rights as the current user.\n (CVE-2019-0884, CVE-2019-0911, CVE-2019-0918)\n\n - A remote code execution vulnerability exists when the\n Windows Jet Database Engine improperly handles objects\n in memory. An attacker who successfully exploited this\n vulnerability could execute arbitrary code on a victim\n system. An attacker could exploit this vulnerability by\n enticing a victim to open a specially crafted file. The\n update addresses the vulnerability by correcting the way\n the Windows Jet Database Engine handles objects in\n memory. (CVE-2019-0889, CVE-2019-0890, CVE-2019-0891,\n CVE-2019-0893, CVE-2019-0894, CVE-2019-0895,\n CVE-2019-0896, CVE-2019-0897, CVE-2019-0898,\n CVE-2019-0899, CVE-2019-0900, CVE-2019-0901,\n CVE-2019-0902)\n\n - A memory corruption vulnerability exists in the Windows\n Server DHCP service when processing specially crafted\n packets. An attacker who successfully exploited the\n vulnerability could run arbitrary code on the DHCP\n server. (CVE-2019-0725)\n\n - A denial of service vulnerability exists when .NET\n Framework improperly handles objects in heap memory. An\n attacker who successfully exploited this vulnerability\n could cause a denial of service against a .NET\n application. (CVE-2019-0864)\n\n - An information disclosure vulnerability exists when the\n Windows GDI component improperly discloses the contents\n of its memory. An attacker who successfully exploited\n the vulnerability could obtain information to further\n compromise the users system. There are multiple ways an\n attacker could exploit the vulnerability, such as by\n convincing a user to open a specially crafted document,\n or by convincing a user to visit an untrusted webpage.\n The security update addresses the vulnerability by\n correcting how the Windows GDI component handles objects\n in memory. (CVE-2019-0758, CVE-2019-0882, CVE-2019-0961)\n\n - An information disclosure vulnerability exists when\n Internet Explorer improperly handles objects in memory.\n An attacker who successfully exploited the vulnerability\n could obtain information to further compromise the users\n system. (CVE-2019-0930)\n\n - An elevation of privilege vulnerability exists in\n Microsoft Windows when a man-in-the-middle attacker is\n able to successfully decode and replace authentication\n request using Kerberos, allowing an attacker to be\n validated as an Administrator. The update addresses this\n vulnerability by changing how these requests are\n validated. (CVE-2019-0734)\n\n - An elevation of privilege vulnerability exists in the\n way Windows Error Reporting (WER) handles files. An\n attacker who successfully exploited this vulnerability\n could run arbitrary code in kernel mode. An attacker\n could then install programs; view, change, or delete\n data; or create new accounts with administrator\n privileges. (CVE-2019-0863)\n\n - A denial of service vulnerability exists when .NET\n Framework or .NET Core improperly handle web requests.\n An attacker who successfully exploited this\n vulnerability could cause a denial of service against a\n .NET Framework or .NET Core web application. The\n vulnerability can be exploited remotely, without\n authentication. A remote unauthenticated attacker could\n exploit this vulnerability by issuing specially crafted\n requests to the .NET Framework or .NET Core application.\n The update addresses the vulnerability by correcting how\n .NET Framework or .NET Core web applications handles web\n requests. (CVE-2019-0980, CVE-2019-0981)\n\n - A remote code execution vulnerability exists in the way\n that the Windows Graphics Device Interface (GDI) handles\n objects in the memory. An attacker who successfully\n exploited this vulnerability could take control of the\n affected system. An attacker could then install\n programs; view, change, or delete data; or create new\n accounts with full user rights. (CVE-2019-0903)\");\n # https://support.microsoft.com/en-us/help/4499171/windows-server-2012-update-kb4499171\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?e0fcb7d5\");\n # https://support.microsoft.com/en-us/help/4072698/windows-server-speculative-execution-side-channel-vulnerabilities-prot\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?8902cebb\");\n # https://support.microsoft.com/en-us/help/4499158/windows-server-2012-update-kb4499158\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?46bb81cc\");\n script_set_attribute(attribute:\"solution\", value:\n\"Apply Security Only update KB4499158 or Cumulative Update KB4499171.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:H/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2019-0903\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2019/05/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2019/05/14\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2019/05/14\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:microsoft:windows\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows : Microsoft Bulletins\");\n\n script_copyright(english:\"This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"smb_check_rollup.nasl\", \"smb_hotfixes.nasl\", \"ms_bulletin_checks_possible.nasl\", 'microsoft_windows_env_vars.nasl');\n script_require_keys(\"SMB/MS_Bulletin_Checks/Possible\");\n script_require_ports(139, 445, \"Host/patch_management_checks\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"smb_hotfixes_fcheck.inc\");\ninclude(\"smb_hotfixes.inc\");\ninclude(\"smb_func.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"smb_reg_query.inc\");\n\nget_kb_item_or_exit(\"SMB/MS_Bulletin_Checks/Possible\");\n\nbulletin = \"MS19-05\";\nkbs = make_list('4499171', '4499158');\n\nif (get_kb_item(\"Host/patch_management_checks\")) hotfix_check_3rd_party(bulletin:bulletin, kbs:kbs, severity:SECURITY_HOLE);\n\nget_kb_item_or_exit(\"SMB/Registry/Enumerated\");\nget_kb_item_or_exit(\"SMB/WindowsVersion\", exit_code:1);\n\nif (hotfix_check_sp_range(win8:'0') <= 0) audit(AUDIT_OS_SP_NOT_VULN);\n\n# Windows 8 EOL\nproductname = get_kb_item_or_exit(\"SMB/ProductName\", exit_code:1);\nif (\"Windows 8\" >< productname) audit(AUDIT_OS_SP_NOT_VULN);\n\nshare = hotfix_get_systemdrive(as_share:TRUE, exit_on_fail:TRUE);\nif (!is_accessible_share(share:share)) audit(AUDIT_SHARE_FAIL, share);\n\nif (\n smb_check_rollup(os:\"6.2\",\n sp:0,\n rollup_date:\"05_2019\",\n bulletin:bulletin,\n rollup_kb_list:[4499171, 4499158])\n)\n{\n replace_kb_item(name:'SMB/Missing/'+bulletin, value:TRUE);\n hotfix_security_hole();\n hotfix_check_fversion_end();\n exit(0);\n}\nelse\n{\n hotfix_check_fversion_end();\n audit(AUDIT_HOST_NOT, hotfix_get_audit_report());\n}\n", "cvss": {"score": 9.3, "vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-12-23T02:32:36", "description": "The remote Windows host is missing security update 4499180 or cumulative update 4499149. It is, therefore, affected by multiple vulnerabilities :\n\n - A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to a .NET Framework (or .NET core) application. The update addresses the vulnerability by correcting how .NET Framework and .NET Core applications handle RegEx string processing. (CVE-2019-0820)\n\n - A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input. An attacker could exploit the vulnerability to execute malicious code. (CVE-2019-0885)\n\n - An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system. A locally authenticated attacker could exploit this vulnerability by running a specially crafted application. The security update addresses the vulnerability by helping to ensure that the Windows Kernel properly handles key enumeration. (CVE-2019-0881)\n\n - An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to properly handle certain symbolic links. An attacker who successfully exploited this vulnerability could potentially set certain items to run at a higher level and thereby elevate permissions. (CVE-2019-0936)\n\n - An spoofing vulnerability exists when Internet Explorer improperly handles URLs. An attacker who successfully exploited this vulnerability could trick a user by redirecting the user to a specially crafted website. The specially crafted website could either spoof content or serve as a pivot to chain an attack with other vulnerabilities in web services. (CVE-2019-0921)\n\n - A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory. (CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895, CVE-2019-0896, CVE-2019-0897, CVE-2019-0898, CVE-2019-0899, CVE-2019-0900, CVE-2019-0901, CVE-2019-0902)\n\n - A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. (CVE-2019-0864)\n\n - A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests.\n This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs;\n view, change, or delete data; or create new accounts with full user rights. (CVE-2019-0708)\n\n - An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the users system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.\n The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory. (CVE-2019-0758, CVE-2019-0882, CVE-2019-0961)\n\n - An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.\n An attacker who successfully exploited the vulnerability could obtain information to further compromise the users system. (CVE-2019-0930)\n\n - An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully decode and replace authentication request using Kerberos, allowing an attacker to be validated as an Administrator. The update addresses this vulnerability by changing how these requests are validated. (CVE-2019-0734)\n\n - A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests.\n An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Framework or .NET Core web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Framework or .NET Core application.\n The update addresses the vulnerability by correcting how .NET Framework or .NET Core web applications handles web requests. (CVE-2019-0980, CVE-2019-0981)\n\n - A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. (CVE-2019-0903)\n\n - A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.\n (CVE-2019-0884, CVE-2019-0918)", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "nessus", "title": "KB4499180: Windows Server 2008 and Windows Vista SP2 May 2019 Security Update (BlueKeep)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2019-0708", "CVE-2019-0734", "CVE-2019-0758", "CVE-2019-0820", "CVE-2019-0864", "CVE-2019-0881", "CVE-2019-0882", "CVE-2019-0884", "CVE-2019-0885", "CVE-2019-0889", "CVE-2019-0890", "CVE-2019-0891", "CVE-2019-0893", "CVE-2019-0894", "CVE-2019-0895", "CVE-2019-0896", "CVE-2019-0897", "CVE-2019-0898", "CVE-2019-0899", "CVE-2019-0900", "CVE-2019-0901", "CVE-2019-0902", "CVE-2019-0903", "CVE-2019-0918", "CVE-2019-0921", "CVE-2019-0930", "CVE-2019-0936", "CVE-2019-0961", "CVE-2019-0980", "CVE-2019-0981"], "modified": "2021-11-30T00:00:00", "cpe": ["cpe:/o:microsoft:windows"], "id": "SMB_NT_MS19_MAY_4499149.NASL", "href": "https://www.tenable.com/plugins/nessus/125060", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from the Microsoft Security Updates API. The text\n# itself is copyright (C) Microsoft Corporation.\n#\n\ninclude('compat.inc');\n\nif (description)\n{\n script_id(125060);\n script_version(\"1.13\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/11/30\");\n\n script_cve_id(\n \"CVE-2019-0708\",\n \"CVE-2019-0734\",\n \"CVE-2019-0758\",\n \"CVE-2019-0820\",\n \"CVE-2019-0864\",\n \"CVE-2019-0881\",\n \"CVE-2019-0882\",\n \"CVE-2019-0884\",\n \"CVE-2019-0885\",\n \"CVE-2019-0889\",\n \"CVE-2019-0890\",\n \"CVE-2019-0891\",\n \"CVE-2019-0893\",\n \"CVE-2019-0894\",\n \"CVE-2019-0895\",\n \"CVE-2019-0896\",\n \"CVE-2019-0897\",\n \"CVE-2019-0898\",\n \"CVE-2019-0899\",\n \"CVE-2019-0900\",\n \"CVE-2019-0901\",\n \"CVE-2019-0902\",\n \"CVE-2019-0903\",\n \"CVE-2019-0918\",\n \"CVE-2019-0921\",\n \"CVE-2019-0930\",\n \"CVE-2019-0936\",\n \"CVE-2019-0961\",\n \"CVE-2019-0980\",\n \"CVE-2019-0981\"\n );\n script_xref(name:\"MSKB\", value:\"4499180\");\n script_xref(name:\"MSKB\", value:\"4499149\");\n script_xref(name:\"MSFT\", value:\"MS19-4499180\");\n script_xref(name:\"MSFT\", value:\"MS19-4499149\");\n script_xref(name:\"CISA-KNOWN-EXPLOITED\", value:\"2022/05/03\");\n\n script_name(english:\"KB4499180: Windows Server 2008 and Windows Vista SP2 May 2019 Security Update (BlueKeep)\");\n script_summary(english:\"Checks for rollup.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Windows host is affected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The remote Windows host is missing security update 4499180\nor cumulative update 4499149. It is, therefore, affected by\nmultiple vulnerabilities :\n\n - A denial of service vulnerability exists when .NET\n Framework and .NET Core improperly process RegEx\n strings. An attacker who successfully exploited this\n vulnerability could cause a denial of service against a\n .NET application. A remote unauthenticated attacker\n could exploit this vulnerability by issuing specially\n crafted requests to a .NET Framework (or .NET core)\n application. The update addresses the vulnerability by\n correcting how .NET Framework and .NET Core applications\n handle RegEx string processing. (CVE-2019-0820)\n\n - A remote code execution vulnerability exists when\n Microsoft Windows OLE fails to properly validate user\n input. An attacker could exploit the vulnerability to\n execute malicious code. (CVE-2019-0885)\n\n - An elevation of privilege vulnerability exists when the\n Windows Kernel improperly handles key enumeration. An\n attacker who successfully exploited the vulnerability\n could gain elevated privileges on a targeted system. A\n locally authenticated attacker could exploit this\n vulnerability by running a specially crafted\n application. The security update addresses the\n vulnerability by helping to ensure that the Windows\n Kernel properly handles key enumeration. (CVE-2019-0881)\n\n - An elevation of privilege vulnerability exists in\n Microsoft Windows when Windows fails to properly handle\n certain symbolic links. An attacker who successfully\n exploited this vulnerability could potentially set\n certain items to run at a higher level and thereby\n elevate permissions. (CVE-2019-0936)\n\n - An spoofing vulnerability exists when Internet Explorer\n improperly handles URLs. An attacker who successfully\n exploited this vulnerability could trick a user by\n redirecting the user to a specially crafted website. The\n specially crafted website could either spoof content or\n serve as a pivot to chain an attack with other\n vulnerabilities in web services. (CVE-2019-0921)\n\n - A remote code execution vulnerability exists when the\n Windows Jet Database Engine improperly handles objects\n in memory. An attacker who successfully exploited this\n vulnerability could execute arbitrary code on a victim\n system. An attacker could exploit this vulnerability by\n enticing a victim to open a specially crafted file. The\n update addresses the vulnerability by correcting the way\n the Windows Jet Database Engine handles objects in\n memory. (CVE-2019-0889, CVE-2019-0890, CVE-2019-0891,\n CVE-2019-0893, CVE-2019-0894, CVE-2019-0895,\n CVE-2019-0896, CVE-2019-0897, CVE-2019-0898,\n CVE-2019-0899, CVE-2019-0900, CVE-2019-0901,\n CVE-2019-0902)\n\n - A denial of service vulnerability exists when .NET\n Framework improperly handles objects in heap memory. An\n attacker who successfully exploited this vulnerability\n could cause a denial of service against a .NET\n application. (CVE-2019-0864)\n\n - A remote code execution vulnerability exists in Remote\n Desktop Services formerly known as Terminal Services\n when an unauthenticated attacker connects to the target\n system using RDP and sends specially crafted requests.\n This vulnerability is pre-authentication and requires no\n user interaction. An attacker who successfully exploited\n this vulnerability could execute arbitrary code on the\n target system. An attacker could then install programs;\n view, change, or delete data; or create new accounts\n with full user rights. (CVE-2019-0708)\n\n - An information disclosure vulnerability exists when the\n Windows GDI component improperly discloses the contents\n of its memory. An attacker who successfully exploited\n the vulnerability could obtain information to further\n compromise the users system. There are multiple ways an\n attacker could exploit the vulnerability, such as by\n convincing a user to open a specially crafted document,\n or by convincing a user to visit an untrusted webpage.\n The security update addresses the vulnerability by\n correcting how the Windows GDI component handles objects\n in memory. (CVE-2019-0758, CVE-2019-0882, CVE-2019-0961)\n\n - An information disclosure vulnerability exists when\n Internet Explorer improperly handles objects in memory.\n An attacker who successfully exploited the vulnerability\n could obtain information to further compromise the users\n system. (CVE-2019-0930)\n\n - An elevation of privilege vulnerability exists in\n Microsoft Windows when a man-in-the-middle attacker is\n able to successfully decode and replace authentication\n request using Kerberos, allowing an attacker to be\n validated as an Administrator. The update addresses this\n vulnerability by changing how these requests are\n validated. (CVE-2019-0734)\n\n - A denial of service vulnerability exists when .NET\n Framework or .NET Core improperly handle web requests.\n An attacker who successfully exploited this\n vulnerability could cause a denial of service against a\n .NET Framework or .NET Core web application. The\n vulnerability can be exploited remotely, without\n authentication. A remote unauthenticated attacker could\n exploit this vulnerability by issuing specially crafted\n requests to the .NET Framework or .NET Core application.\n The update addresses the vulnerability by correcting how\n .NET Framework or .NET Core web applications handles web\n requests. (CVE-2019-0980, CVE-2019-0981)\n\n - A remote code execution vulnerability exists in the way\n that the Windows Graphics Device Interface (GDI) handles\n objects in the memory. An attacker who successfully\n exploited this vulnerability could take control of the\n affected system. An attacker could then install\n programs; view, change, or delete data; or create new\n accounts with full user rights. (CVE-2019-0903)\n\n - A remote code execution vulnerability exists in the way\n the scripting engine handles objects in memory in\n Microsoft browsers. The vulnerability could corrupt\n memory in such a way that an attacker could execute\n arbitrary code in the context of the current user. An\n attacker who successfully exploited the vulnerability\n could gain the same user rights as the current user.\n (CVE-2019-0884, CVE-2019-0918)\");\n # https://support.microsoft.com/en-us/help/4499180/windows-server-2008-update-kb4499180\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?221b2bbc\");\n # https://support.microsoft.com/en-us/help/4499149/windows-server-2008-update-kb4499149\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?15faa0a8\");\n script_set_attribute(attribute:\"solution\", value:\n\"Apply Security Only update KB4499180 or Cumulative Update KB4499149.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:H/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2019-0708\");\n\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_core\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n script_set_attribute(attribute:\"metasploit_name\", value:'CVE-2019-0708 BlueKeep RDP Remote Windows Kernel Use After Free');\n script_set_attribute(attribute:\"exploit_framework_metasploit\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_canvas\", value:\"true\");\n script_set_attribute(attribute:\"canvas_package\", value:\"CANVAS\");\n script_set_attribute(attribute:\"in_the_news\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2019/05/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2019/05/14\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2019/05/14\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:microsoft:windows\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows : Microsoft Bulletins\");\n\n script_copyright(english:\"This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"smb_check_rollup.nasl\", \"smb_hotfixes.nasl\", \"ms_bulletin_checks_possible.nasl\");\n script_require_keys(\"SMB/MS_Bulletin_Checks/Possible\");\n script_require_ports(139, 445, \"Host/patch_management_checks\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"smb_hotfixes_fcheck.inc\");\ninclude(\"smb_hotfixes.inc\");\ninclude(\"smb_func.inc\");\ninclude(\"misc_func.inc\");\n\nget_kb_item_or_exit(\"SMB/MS_Bulletin_Checks/Possible\");\n\nbulletin = \"MS19-05\";\nkbs = make_list('4499180', '4499149');\n\nif (get_kb_item(\"Host/patch_management_checks\")) hotfix_check_3rd_party(bulletin:bulletin, kbs:kbs, severity:SECURITY_HOLE);\n\nget_kb_item_or_exit(\"SMB/Registry/Enumerated\");\nget_kb_item_or_exit(\"SMB/WindowsVersion\", exit_code:1);\n\nif (hotfix_check_sp_range(vista:'2') <= 0) audit(AUDIT_OS_SP_NOT_VULN);\n\nshare = hotfix_get_systemdrive(as_share:TRUE, exit_on_fail:TRUE);\nif (!is_accessible_share(share:share)) audit(AUDIT_SHARE_FAIL, share);\n\nif (\n smb_check_rollup(os:\"6.0\",\n sp:2,\n rollup_date:\"05_2019\",\n bulletin:bulletin,\n rollup_kb_list:[4499180, 4499149])\n)\n{\n replace_kb_item(name:'SMB/Missing/'+bulletin, value:TRUE);\n hotfix_security_hole();\n hotfix_check_fversion_end();\n exit(0);\n}\nelse\n{\n hotfix_check_fversion_end();\n audit(AUDIT_HOST_NOT, hotfix_get_audit_report());\n}\n", "cvss": {"score": 10, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "openvas": [{"lastseen": "2020-07-21T20:40:47", "description": "This host is missing a critical security\n update according to Microsoft KB4494441", "cvss3": {}, "published": "2019-05-15T00:00:00", "type": "openvas", "title": "Microsoft Windows Multiple Vulnerabilities (KB4494441)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2019-0683", "CVE-2019-0923", "CVE-2018-12126", "CVE-2019-0890", "CVE-2019-0891", "CVE-2019-0933", "CVE-2019-0921", "CVE-2019-0927", "CVE-2019-0727", "CVE-2019-0734", "CVE-2019-0893", "CVE-2019-0918", "CVE-2018-11091", "CVE-2019-0892", "CVE-2019-0995", "CVE-2019-0889", "CVE-2019-0896", "CVE-2019-0899", "CVE-2019-0929", "CVE-2019-0913", "CVE-2019-0882", "CVE-2019-0901", "CVE-2019-0758", "CVE-2019-0707", "CVE-2019-0900", "CVE-2019-0930", "CVE-2019-0863", "CVE-2018-12127", "CVE-2019-0938", "CVE-2019-0902", "CVE-2019-0940", "CVE-2019-0916", "CVE-2019-0903", "CVE-2019-0931", "CVE-2019-0725", "CVE-2019-0886", "CVE-2019-0917", "CVE-2019-0926", "CVE-2019-0937", "CVE-2019-0898", "CVE-2019-0915", "CVE-2019-0936", "CVE-2019-0911", "CVE-2019-0924", "CVE-2019-0884", "CVE-2019-0897", "CVE-2019-0885", "CVE-2019-0961", "CVE-2019-0894", "CVE-2019-0942", "CVE-2019-0912", "CVE-2019-0733", "CVE-2019-0914", "CVE-2019-0925", "CVE-2019-0881", "CVE-2019-0922", "CVE-2018-12130", "CVE-2019-0895"], "modified": "2020-07-17T00:00:00", "id": "OPENVAS:1361412562310815046", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310815046", "sourceData": "# Copyright (C) 2019 Greenbone Networks GmbH\n# Some text descriptions might be excerpted from (a) referenced\n# source(s), and are Copyright (C) by the respective right holder(s).\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.815046\");\n script_version(\"2020-07-17T05:57:41+0000\");\n script_cve_id(\"CVE-2018-12126\", \"CVE-2018-12130\", \"CVE-2018-12127\", \"CVE-2018-11091\",\n \"CVE-2019-0683\", \"CVE-2019-0707\", \"CVE-2019-0725\", \"CVE-2019-0727\",\n \"CVE-2019-0733\", \"CVE-2019-0734\", \"CVE-2019-0758\", \"CVE-2019-0863\",\n \"CVE-2019-0881\", \"CVE-2019-0882\", \"CVE-2019-0884\", \"CVE-2019-0885\",\n \"CVE-2019-0886\", \"CVE-2019-0889\", \"CVE-2019-0890\", \"CVE-2019-0891\",\n \"CVE-2019-0892\", \"CVE-2019-0893\", \"CVE-2019-0894\", \"CVE-2019-0895\",\n \"CVE-2019-0896\", \"CVE-2019-0897\", \"CVE-2019-0898\", \"CVE-2019-0899\",\n \"CVE-2019-0900\", \"CVE-2019-0901\", \"CVE-2019-0902\", \"CVE-2019-0903\",\n \"CVE-2019-0911\", \"CVE-2019-0912\", \"CVE-2019-0913\", \"CVE-2019-0914\",\n \"CVE-2019-0915\", \"CVE-2019-0916\", \"CVE-2019-0917\", \"CVE-2019-0918\",\n \"CVE-2019-0921\", \"CVE-2019-0922\", \"CVE-2019-0923\", \"CVE-2019-0924\",\n \"CVE-2019-0925\", \"CVE-2019-0926\", \"CVE-2019-0927\", \"CVE-2019-0929\",\n \"CVE-2019-0930\", \"CVE-2019-0931\", \"CVE-2019-0933\", \"CVE-2019-0936\",\n \"CVE-2019-0937\", \"CVE-2019-0938\", \"CVE-2019-0940\", \"CVE-2019-0942\",\n \"CVE-2019-0961\", \"CVE-2019-0995\");\n script_tag(name:\"cvss_base\", value:\"9.3\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"2020-07-17 05:57:41 +0000 (Fri, 17 Jul 2020)\");\n script_tag(name:\"creation_date\", value:\"2019-05-15 09:21:09 +0530 (Wed, 15 May 2019)\");\n script_name(\"Microsoft Windows Multiple Vulnerabilities (KB4494441)\");\n\n script_tag(name:\"summary\", value:\"This host is missing a critical security\n update according to Microsoft KB4494441\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present\n on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws exists as,\n\n - Windows Jet Database Engine improperly handles objects in memory.\n\n - Chakra scripting engine improperly handles objects in memory in Microsoft Edge.\n\n - Windows Error Reporting (WER) improperly handles files.\n\n - An error in in Windows Defender Application Control (WDAC) which could allow\n an attacker to bypass WDAC enforcement.\n\n Please see the references for more information about the vulnerabilities.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow an\n attacker to execute arbitrary code, escalate privileges, bypass security\n restrictions and disclose sensitive information on a victim system.\");\n\n script_tag(name:\"affected\", value:\"- Microsoft Windows 10 Version 1809 for 32-bit Systems\n\n - Microsoft Windows 10 Version 1809 for x64-based Systems\n\n - Microsoft Windows Server 2019\");\n\n script_tag(name:\"solution\", value:\"The vendor has released updates. Please see\n the references for more information.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"executable_version\");\n script_xref(name:\"URL\", value:\"https://support.microsoft.com/en-us/help/4494441\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2019 Greenbone Networks GmbH\");\n script_family(\"Windows : Microsoft Bulletins\");\n script_dependencies(\"smb_reg_service_pack.nasl\");\n script_require_ports(139, 445);\n script_mandatory_keys(\"SMB/WindowsVersion\");\n exit(0);\n}\n\ninclude(\"smb_nt.inc\");\ninclude(\"secpod_reg.inc\");\ninclude(\"version_func.inc\");\ninclude(\"secpod_smb_func.inc\");\n\nif(hotfix_check_sp(win10:1, win10x64:1, win2019:1) <= 0){\n exit(0);\n}\n\nsysPath = smb_get_system32root();\nif(!sysPath)\n exit(0);\n\nedgeVer = fetch_file_version(sysPath:sysPath, file_name:\"edgehtml.dll\");\nif(!edgeVer)\n exit(0);\n\nif(version_in_range(version:edgeVer, test_version:\"11.0.17763.0\", test_version2:\"11.0.17763.502\")) {\n report = report_fixed_ver(file_checked:sysPath + \"\\Edgehtml.dll\",\n file_version:edgeVer, vulnerable_range:\"11.0.17763.0 - 11.0.17763.502\");\n security_message(data:report);\n exit(0);\n}\n\nexit(99);\n", "cvss": {"score": 9.3, "vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-07-21T20:40:51", "description": "This host is missing a critical security\n update according to Microsoft KB4499167", "cvss3": {}, "published": "2019-05-15T00:00:00", "type": "openvas", "title": "Microsoft Windows Multiple Vulnerabilities (KB4499167)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2019-0683", "CVE-2019-0864", "CVE-2019-0923", "CVE-2018-12126", "CVE-2019-0890", "CVE-2019-0891", "CVE-2019-0933", "CVE-2019-0921", "CVE-2019-0927", "CVE-2019-0727", "CVE-2019-0734", "CVE-2019-0893", "CVE-2019-0918", "CVE-2018-11091", "CVE-2019-0981", "CVE-2019-0892", "CVE-2019-0995", "CVE-2019-0889", "CVE-2019-0896", "CVE-2019-0899", "CVE-2019-0929", "CVE-2019-0913", "CVE-2019-0882", "CVE-2019-0901", "CVE-2019-0758", "CVE-2019-0707", "CVE-2019-0900", "CVE-2019-0930", "CVE-2019-0863", "CVE-2018-12127", "CVE-2019-0938", "CVE-2019-0902", "CVE-2019-0940", "CVE-2019-0820", "CVE-2019-0916", "CVE-2019-0903", "CVE-2019-0931", "CVE-2019-0725", "CVE-2019-0886", "CVE-2019-0917", "CVE-2019-0937", "CVE-2019-0898", "CVE-2019-0915", "CVE-2019-0936", "CVE-2019-0911", "CVE-2019-0924", "CVE-2019-0884", "CVE-2019-0897", "CVE-2019-0885", "CVE-2019-0961", "CVE-2019-0894", "CVE-2019-0942", "CVE-2019-0912", "CVE-2019-0733", "CVE-2019-0914", "CVE-2019-0925", "CVE-2019-0881", "CVE-2019-0922", "CVE-2019-0980", "CVE-2018-12130", "CVE-2019-0895"], "modified": "2020-07-17T00:00:00", "id": "OPENVAS:1361412562310815045", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310815045", "sourceData": "# Copyright (C) 2019 Greenbone Networks GmbH\n# Some text descriptions might be excerpted from (a) referenced\n# source(s), and are Copyright (C) by the respective right holder(s).\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.815045\");\n script_version(\"2020-07-17T05:57:41+0000\");\n script_cve_id(\"CVE-2019-0881\", \"CVE-2019-0882\", \"CVE-2019-0938\", \"CVE-2019-0940\",\n \"CVE-2019-0942\", \"CVE-2019-0707\", \"CVE-2019-0725\", \"CVE-2019-0902\",\n \"CVE-2019-0903\", \"CVE-2019-0911\", \"CVE-2019-0727\", \"CVE-2019-0733\",\n \"CVE-2019-0734\", \"CVE-2019-0912\", \"CVE-2019-0913\", \"CVE-2019-0914\",\n \"CVE-2019-0915\", \"CVE-2019-0916\", \"CVE-2019-0758\", \"CVE-2019-0820\",\n \"CVE-2019-0917\", \"CVE-2019-0918\", \"CVE-2019-0921\", \"CVE-2019-0922\",\n \"CVE-2019-0863\", \"CVE-2019-0923\", \"CVE-2019-0924\", \"CVE-2019-0925\",\n \"CVE-2019-0927\", \"CVE-2019-0929\", \"CVE-2019-0930\", \"CVE-2019-0864\",\n \"CVE-2019-0931\", \"CVE-2019-0933\", \"CVE-2019-0936\", \"CVE-2019-0937\",\n \"CVE-2019-0884\", \"CVE-2019-0885\", \"CVE-2019-0886\", \"CVE-2019-0961\",\n \"CVE-2019-0980\", \"CVE-2019-0889\", \"CVE-2019-0890\", \"CVE-2019-0891\",\n \"CVE-2019-0892\", \"CVE-2019-0893\", \"CVE-2019-0894\", \"CVE-2019-0981\",\n \"CVE-2019-0895\", \"CVE-2019-0896\", \"CVE-2019-0995\", \"CVE-2019-0897\",\n \"CVE-2019-0898\", \"CVE-2019-0899\", \"CVE-2019-0900\", \"CVE-2019-0901\",\n \"CVE-2018-12126\", \"CVE-2018-12130\", \"CVE-2018-12127\", \"CVE-2018-11091\",\n \"CVE-2019-0683\");\n script_tag(name:\"cvss_base\", value:\"9.3\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"2020-07-17 05:57:41 +0000 (Fri, 17 Jul 2020)\");\n script_tag(name:\"creation_date\", value:\"2019-05-15 08:42:52 +0530 (Wed, 15 May 2019)\");\n script_name(\"Microsoft Windows Multiple Vulnerabilities (KB4499167)\");\n\n script_tag(name:\"summary\", value:\"This host is missing a critical security\n update according to Microsoft KB4499167\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present\n on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws exists as,\n\n - Windows Jet Database Engine improperly handles objects in memory.\n\n - Chakra scripting engine improperly handles objects in memory in Microsoft Edge.\n\n - Windows Error Reporting (WER) improperly handles files.\n\n - An error in Windows Defender Application Control (WDAC) which could allow an\n attacker to bypass WDAC enforcement.\n\n Please see the references for more information about the vulnerabilities.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow an attacker\n to execute arbitrary code on a victim system, escalate privileges, bypass\n security restrictions, disclose sensitive information and cause a denial of\n service condition on a victim system.\");\n\n script_tag(name:\"affected\", value:\"- Microsoft Windows 10 Version 1803 for 32-bit Systems\n\n - Microsoft Windows 10 Version 1803 for x64-based Systems\");\n\n script_tag(name:\"solution\", value:\"The vendor has released updates. Please see\n the references for more information.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"executable_version\");\n script_xref(name:\"URL\", value:\"https://support.microsoft.com/en-us/help/4499167\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2019 Greenbone Networks GmbH\");\n script_family(\"Windows : Microsoft Bulletins\");\n script_dependencies(\"smb_reg_service_pack.nasl\");\n script_require_ports(139, 445);\n script_mandatory_keys(\"SMB/WindowsVersion\");\n exit(0);\n}\n\ninclude(\"smb_nt.inc\");\ninclude(\"secpod_reg.inc\");\ninclude(\"version_func.inc\");\ninclude(\"secpod_smb_func.inc\");\n\nif(hotfix_check_sp(win10:1, win10x64:1) <= 0){\n exit(0);\n}\n\nsysPath = smb_get_system32root();\nif(!sysPath)\n exit(0);\n\nedgeVer = fetch_file_version(sysPath:sysPath, file_name:\"edgehtml.dll\");\nif(!edgeVer)\n exit(0);\n\nif(version_in_range(version:edgeVer, test_version:\"11.0.17134.0\", test_version2:\"11.0.17134.764\")) {\n report = report_fixed_ver(file_checked:sysPath + \"\\Edgehtml.dll\",\n file_version:edgeVer, vulnerable_range:\"11.0.17134.0 - 11.0.17134.764\");\n security_message(data:report);\n exit(0);\n}\n\nexit(99);\n", "cvss": {"score": 9.3, "vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-07-21T20:40:39", "description": "This host is missing a critical security\n update according to Microsoft KB4499179", "cvss3": {}, "published": "2019-05-15T00:00:00", "type": "openvas", "title": "Microsoft Windows Multiple Vulnerabilities (KB4499179)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2019-0683", "CVE-2019-0864", "CVE-2019-0923", "CVE-2018-12126", "CVE-2019-0890", "CVE-2019-0891", "CVE-2019-0933", "CVE-2019-0921", "CVE-2019-0927", "CVE-2019-0727", "CVE-2019-0734", "CVE-2019-0893", "CVE-2019-0918", "CVE-2018-11091", "CVE-2019-0981", "CVE-2019-0892", "CVE-2019-0995", "CVE-2019-0889", "CVE-2019-0896", "CVE-2019-0899", "CVE-2019-0913", "CVE-2019-0882", "CVE-2019-0901", "CVE-2019-0758", "CVE-2019-0707", "CVE-2019-0900", "CVE-2019-0930", "CVE-2019-0863", "CVE-2018-12127", "CVE-2019-0938", "CVE-2019-0902", "CVE-2019-0940", "CVE-2019-0820", "CVE-2019-0916", "CVE-2019-0903", "CVE-2019-0931", "CVE-2019-0886", "CVE-2019-0917", "CVE-2019-0937", "CVE-2019-0898", "CVE-2019-0915", "CVE-2019-0936", "CVE-2019-0911", "CVE-2019-0924", "CVE-2019-0884", "CVE-2019-0897", "CVE-2019-0885", "CVE-2019-0961", "CVE-2019-0894", "CVE-2019-0942", "CVE-2019-0912", "CVE-2019-0733", "CVE-2019-0914", "CVE-2019-0925", "CVE-2019-0881", "CVE-2019-0922", "CVE-2019-0980", "CVE-2018-12130", "CVE-2019-0895"], "modified": "2020-07-17T00:00:00", "id": "OPENVAS:1361412562310815049", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310815049", "sourceData": "# Copyright (C) 2019 Greenbone Networks GmbH\n# Some text descriptions might be excerpted from (a) referenced\n# source(s), and are Copyright (C) by the respective right holder(s).\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.815049\");\n script_version(\"2020-07-17T05:57:41+0000\");\n script_cve_id(\"CVE-2018-11091\", \"CVE-2018-12126\", \"CVE-2018-12127\", \"CVE-2018-12130\",\n \"CVE-2019-0683\", \"CVE-2019-0707\", \"CVE-2019-0727\", \"CVE-2019-0733\",\n \"CVE-2019-0734\", \"CVE-2019-0758\", \"CVE-2019-0820\", \"CVE-2019-0863\",\n \"CVE-2019-0864\", \"CVE-2019-0881\", \"CVE-2019-0882\", \"CVE-2019-0884\",\n \"CVE-2019-0885\", \"CVE-2019-0886\", \"CVE-2019-0889\", \"CVE-2019-0890\",\n \"CVE-2019-0891\", \"CVE-2019-0892\", \"CVE-2019-0893\", \"CVE-2019-0894\",\n \"CVE-2019-0895\", \"CVE-2019-0896\", \"CVE-2019-0897\", \"CVE-2019-0898\",\n \"CVE-2019-0899\", \"CVE-2019-0900\", \"CVE-2019-0901\", \"CVE-2019-0902\",\n \"CVE-2019-0903\", \"CVE-2019-0911\", \"CVE-2019-0912\", \"CVE-2019-0913\",\n \"CVE-2019-0914\", \"CVE-2019-0915\", \"CVE-2019-0916\", \"CVE-2019-0917\",\n \"CVE-2019-0918\", \"CVE-2019-0921\", \"CVE-2019-0922\", \"CVE-2019-0923\",\n \"CVE-2019-0924\", \"CVE-2019-0925\", \"CVE-2019-0927\", \"CVE-2019-0930\",\n \"CVE-2019-0931\", \"CVE-2019-0933\", \"CVE-2019-0936\", \"CVE-2019-0937\",\n \"CVE-2019-0938\", \"CVE-2019-0940\", \"CVE-2019-0942\", \"CVE-2019-0961\",\n \"CVE-2019-0980\", \"CVE-2019-0981\", \"CVE-2019-0995\");\n script_tag(name:\"cvss_base\", value:\"9.3\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"2020-07-17 05:57:41 +0000 (Fri, 17 Jul 2020)\");\n script_tag(name:\"creation_date\", value:\"2019-05-15 10:05:06 +0530 (Wed, 15 May 2019)\");\n script_name(\"Microsoft Windows Multiple Vulnerabilities (KB4499179)\");\n\n script_tag(name:\"summary\", value:\"This host is missing a critical security\n update according to Microsoft KB4499179\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present\n on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws exists as,\n\n - Windows Jet Database Engine improperly handles objects in memory.\n\n - Chakra scripting engine improperly handles objects in memory in Microsoft Edge.\n\n - Windows Error Reporting (WER) improperly handles files.\n\n - An error in Windows Defender Application Control (WDAC) which could allow an\n attacker to bypass WDAC enforcement.\n\n Please see the references for more information about the vulnerabilities.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow an attacker\n to execute arbitrary code on a victim system, escalate privileges, bypass\n security restrictions, disclose sensitive information and cause a denial of\n service condition on a victim system.\");\n\n script_tag(name:\"affected\", value:\"- Microsoft Windows 10 Version 1709 for 32-bit Systems\n\n - Microsoft Windows 10 Version 1709 for 64-based Systems\");\n\n script_tag(name:\"solution\", value:\"The vendor has released updates. Please see\n the references for more information.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"executable_version\");\n script_xref(name:\"URL\", value:\"https://support.microsoft.com/en-us/help/4499179\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2019 Greenbone Networks GmbH\");\n script_family(\"Windows : Microsoft Bulletins\");\n script_dependencies(\"smb_reg_service_pack.nasl\");\n script_require_ports(139, 445);\n script_mandatory_keys(\"SMB/WindowsVersion\");\n exit(0);\n}\n\ninclude(\"smb_nt.inc\");\ninclude(\"secpod_reg.inc\");\ninclude(\"version_func.inc\");\ninclude(\"secpod_smb_func.inc\");\n\nif(hotfix_check_sp(win10:1, win10x64:1) <= 0){\n exit(0);\n}\n\nsysPath = smb_get_system32root();\nif(!sysPath)\n exit(0);\n\nedgeVer = fetch_file_version(sysPath:sysPath, file_name:\"edgehtml.dll\");\nif(!edgeVer)\n exit(0);\n\nif(version_in_range(version:edgeVer, test_version:\"11.0.16299.0\", test_version2:\"11.0.16299.1145\")) {\n report = report_fixed_ver(file_checked:sysPath + \"\\Edgehtml.dll\",\n file_version:edgeVer, vulnerable_range:\"11.0.16299.0 - 11.0.16299.1145\");\n security_message(data:report);\n exit(0);\n}\n\nexit(99);\n", "cvss": {"score": 9.3, "vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-07-21T20:40:53", "description": "This host is missing a critical security\n update according to Microsoft KB4499181", "cvss3": {}, "published": "2019-05-15T00:00:00", "type": "openvas", "title": "Microsoft Windows Multiple Vulnerabilities (KB4499181)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2019-0683", "CVE-2019-0864", "CVE-2019-0923", "CVE-2018-12126", "CVE-2019-0890", "CVE-2019-0891", "CVE-2019-0933", "CVE-2019-0921", "CVE-2019-0927", "CVE-2019-0727", "CVE-2019-0734", "CVE-2019-0893", "CVE-2019-0918", "CVE-2018-11091", "CVE-2019-0981", "CVE-2019-0995", "CVE-2019-0889", "CVE-2019-0896", "CVE-2019-0899", "CVE-2019-0913", "CVE-2019-0882", "CVE-2019-0901", "CVE-2019-0758", "CVE-2019-0707", "CVE-2019-0900", "CVE-2019-0930", "CVE-2019-0863", "CVE-2018-12127", "CVE-2019-0938", "CVE-2019-0902", "CVE-2019-0940", "CVE-2019-0820", "CVE-2019-0916", "CVE-2019-0903", "CVE-2019-0931", "CVE-2019-0886", "CVE-2019-0917", "CVE-2019-0898", "CVE-2019-0915", "CVE-2019-0936", "CVE-2019-0911", "CVE-2019-0924", "CVE-2019-0884", "CVE-2019-0897", "CVE-2019-0885", "CVE-2019-0961", "CVE-2019-0894", "CVE-2019-0942", "CVE-2019-0912", "CVE-2019-0733", "CVE-2019-0914", "CVE-2019-0925", "CVE-2019-0881", "CVE-2019-0922", "CVE-2019-0980", "CVE-2018-12130", "CVE-2019-0895"], "modified": "2020-07-17T00:00:00", "id": "OPENVAS:1361412562310815050", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310815050", "sourceData": "# Copyright (C) 2019 Greenbone Networks GmbH\n# Some text descriptions might be excerpted from (a) referenced\n# source(s), and are Copyright (C) by the respective right holder(s).\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.815050\");\n script_version(\"2020-07-17T05:57:41+0000\");\n script_cve_id(\"CVE-2018-12126\", \"CVE-2018-12130\", \"CVE-2018-12127\", \"CVE-2018-11091\",\n \"CVE-2019-0683\", \"CVE-2019-0707\", \"CVE-2019-0727\", \"CVE-2019-0733\",\n \"CVE-2019-0734\", \"CVE-2019-0758\", \"CVE-2019-0820\", \"CVE-2019-0863\",\n \"CVE-2019-0864\", \"CVE-2019-0881\", \"CVE-2019-0882\", \"CVE-2019-0884\",\n \"CVE-2019-0885\", \"CVE-2019-0886\", \"CVE-2019-0889\", \"CVE-2019-0890\",\n \"CVE-2019-0891\", \"CVE-2019-0893\", \"CVE-2019-0894\", \"CVE-2019-0895\",\n \"CVE-2019-0896\", \"CVE-2019-0897\", \"CVE-2019-0898\", \"CVE-2019-0899\",\n \"CVE-2019-0900\", \"CVE-2019-0901\", \"CVE-2019-0902\", \"CVE-2019-0903\",\n \"CVE-2019-0911\", \"CVE-2019-0912\", \"CVE-2019-0913\", \"CVE-2019-0914\",\n \"CVE-2019-0915\", \"CVE-2019-0916\", \"CVE-2019-0917\", \"CVE-2019-0918\",\n \"CVE-2019-0921\", \"CVE-2019-0922\", \"CVE-2019-0923\", \"CVE-2019-0924\",\n \"CVE-2019-0925\", \"CVE-2019-0927\", \"CVE-2019-0930\", \"CVE-2019-0931\",\n \"CVE-2019-0933\", \"CVE-2019-0936\", \"CVE-2019-0938\", \"CVE-2019-0940\",\n \"CVE-2019-0942\", \"CVE-2019-0961\", \"CVE-2019-0980\", \"CVE-2019-0981\",\n \"CVE-2019-0995\");\n script_tag(name:\"cvss_base\", value:\"9.3\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"2020-07-17 05:57:41 +0000 (Fri, 17 Jul 2020)\");\n script_tag(name:\"creation_date\", value:\"2019-05-15 10:16:13 +0530 (Wed, 15 May 2019)\");\n script_name(\"Microsoft Windows Multiple Vulnerabilities (KB4499181)\");\n\n script_tag(name:\"summary\", value:\"This host is missing a critical security\n update according to Microsoft KB4499181\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present\n on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws exists as,\n\n - Windows Jet Database Engine improperly handles objects in memory.\n\n - Chakra scripting engine improperly handles objects in memory in Microsoft Edge.\n\n - Windows Error Reporting (WER) improperly handles files.\n\n - An error in Windows Defender Application Control (WDAC) which could allow an\n attacker to bypass WDAC enforcement.\n\n Please see the references for more information about the vulnerabilities.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow an attacker\n to execute arbitrary code on a victim system, escalate privileges, bypass\n security restrictions, disclose sensitive information and cause a denial of\n service condition on a victim system.\");\n\n script_tag(name:\"affected\", value:\"Microsoft Windows 10 Version 1703 x32/x64.\");\n\n script_tag(name:\"solution\", value:\"The vendor has released updates. Please see\n the references for more information.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"executable_version\");\n script_xref(name:\"URL\", value:\"https://support.microsoft.com/en-us/help/4499181\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2019 Greenbone Networks GmbH\");\n script_family(\"Windows : Microsoft Bulletins\");\n script_dependencies(\"smb_reg_service_pack.nasl\");\n script_require_ports(139, 445);\n script_mandatory_keys(\"SMB/WindowsVersion\");\n exit(0);\n}\n\ninclude(\"smb_nt.inc\");\ninclude(\"secpod_reg.inc\");\ninclude(\"version_func.inc\");\ninclude(\"secpod_smb_func.inc\");\n\nif(hotfix_check_sp(win10:1, win10x64:1) <= 0){\n exit(0);\n}\n\nsysPath = smb_get_system32root();\nif(!sysPath)\n exit(0);\n\nedgeVer = fetch_file_version(sysPath:sysPath, file_name:\"edgehtml.dll\");\nif(!edgeVer)\n exit(0);\n\nif(version_in_range(version:edgeVer, test_version:\"11.0.15063.0\", test_version2:\"11.0.15063.1804\")) {\n report = report_fixed_ver(file_checked:sysPath + \"\\Edgehtml.dll\",\n file_version:edgeVer, vulnerable_range:\"11.0.15063.0 - 11.0.15063.1804\");\n security_message(data:report);\n exit(0);\n}\n\nexit(99);\n", "cvss": {"score": 9.3, "vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-07-21T20:40:40", "description": "This host is missing a critical security\n update according to Microsoft KB4494440", "cvss3": {}, "published": "2019-05-15T00:00:00", "type": "openvas", "title": "Microsoft Windows Multiple Vulnerabilities (KB4494440)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2019-0683", "CVE-2019-0864", "CVE-2019-0923", "CVE-2018-12126", "CVE-2019-0890", "CVE-2019-0891", "CVE-2019-0933", "CVE-2019-0921", "CVE-2019-0927", "CVE-2019-0727", "CVE-2019-0734", "CVE-2019-0893", "CVE-2019-0918", "CVE-2018-11091", "CVE-2019-0981", "CVE-2019-0995", "CVE-2019-0889", "CVE-2019-0896", "CVE-2019-0899", "CVE-2019-0913", "CVE-2019-0882", "CVE-2019-0901", "CVE-2019-0758", "CVE-2019-0707", "CVE-2019-0900", "CVE-2019-0930", "CVE-2019-0863", "CVE-2018-12127", "CVE-2019-0938", "CVE-2019-0902", "CVE-2019-0940", "CVE-2019-0820", "CVE-2019-0916", "CVE-2019-0903", "CVE-2019-0725", "CVE-2019-0886", "CVE-2019-0917", "CVE-2019-0898", "CVE-2019-0915", "CVE-2019-0936", "CVE-2019-0911", "CVE-2019-0924", "CVE-2019-0884", "CVE-2019-0897", "CVE-2019-0885", "CVE-2019-0961", "CVE-2019-0894", "CVE-2019-0942", "CVE-2019-0912", "CVE-2019-0733", "CVE-2019-0914", "CVE-2019-0925", "CVE-2019-0881", "CVE-2019-0922", "CVE-2019-0980", "CVE-2018-12130", "CVE-2019-0895"], "modified": "2020-07-17T00:00:00", "id": "OPENVAS:1361412562310815047", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310815047", "sourceData": "# Copyright (C) 2019 Greenbone Networks GmbH\n# Some text descriptions might be excerpted from (a) referenced\n# source(s), and are Copyright (C) by the respective right holder(s).\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.815047\");\n script_version(\"2020-07-17T05:57:41+0000\");\n script_cve_id(\"CVE-2018-11091\", \"CVE-2018-12126\", \"CVE-2018-12127\", \"CVE-2018-12130\",\n \"CVE-2019-0683\", \"CVE-2019-0707\", \"CVE-2019-0725\", \"CVE-2019-0727\",\n \"CVE-2019-0733\", \"CVE-2019-0734\", \"CVE-2019-0758\", \"CVE-2019-0820\",\n \"CVE-2019-0863\", \"CVE-2019-0864\", \"CVE-2019-0881\", \"CVE-2019-0882\",\n \"CVE-2019-0884\", \"CVE-2019-0885\", \"CVE-2019-0886\", \"CVE-2019-0889\",\n \"CVE-2019-0890\", \"CVE-2019-0891\", \"CVE-2019-0893\", \"CVE-2019-0894\",\n \"CVE-2019-0895\", \"CVE-2019-0896\", \"CVE-2019-0897\", \"CVE-2019-0898\",\n \"CVE-2019-0899\", \"CVE-2019-0900\", \"CVE-2019-0901\", \"CVE-2019-0902\",\n \"CVE-2019-0903\", \"CVE-2019-0911\", \"CVE-2019-0912\", \"CVE-2019-0913\",\n \"CVE-2019-0914\", \"CVE-2019-0915\", \"CVE-2019-0916\", \"CVE-2019-0917\",\n \"CVE-2019-0918\", \"CVE-2019-0921\", \"CVE-2019-0922\", \"CVE-2019-0923\",\n \"CVE-2019-0924\", \"CVE-2019-0925\", \"CVE-2019-0927\", \"CVE-2019-0930\",\n \"CVE-2019-0933\", \"CVE-2019-0936\", \"CVE-2019-0938\", \"CVE-2019-0940\",\n \"CVE-2019-0942\", \"CVE-2019-0961\", \"CVE-2019-0980\", \"CVE-2019-0981\",\n \"CVE-2019-0995\");\n script_tag(name:\"cvss_base\", value:\"9.3\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"2020-07-17 05:57:41 +0000 (Fri, 17 Jul 2020)\");\n script_tag(name:\"creation_date\", value:\"2019-05-15 09:41:28 +0530 (Wed, 15 May 2019)\");\n script_name(\"Microsoft Windows Multiple Vulnerabilities (KB4494440)\");\n\n script_tag(name:\"summary\", value:\"This host is missing a critical security\n update according to Microsoft KB4494440\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present\n on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws exists as,\n\n - Windows Jet Database Engine improperly handles objects in memory.\n\n - Chakra scripting engine improperly handles objects in memory in Microsoft Edge.\n\n - Windows Error Reporting (WER) improperly handles files.\n\n - An error in Windows Defender Application Control (WDAC) which could allow an\n attacker to bypass WDAC enforcement.\n\n Please see the references for more information about the vulnerabilities.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow an attacker\n to execute arbitrary code on a victim system, escalate privileges, bypass\n security restrictions, disclose sensitive information and cause a denial of\n service condition on a victim system.\");\n\n script_tag(name:\"affected\", value:\"- Microsoft Windows 10 Version 1607 x32/x64\n\n - Microsoft Windows Server 2016\");\n\n script_tag(name:\"solution\", value:\"The vendor has released updates. Please see\n the references for more information.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"executable_version\");\n script_xref(name:\"URL\", value:\"https://support.microsoft.com/en-us/help/4494440\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2019 Greenbone Networks GmbH\");\n script_family(\"Windows : Microsoft Bulletins\");\n script_dependencies(\"smb_reg_service_pack.nasl\");\n script_require_ports(139, 445);\n script_mandatory_keys(\"SMB/WindowsVersion\");\n exit(0);\n}\n\ninclude(\"smb_nt.inc\");\ninclude(\"secpod_reg.inc\");\ninclude(\"version_func.inc\");\ninclude(\"secpod_smb_func.inc\");\n\nif(hotfix_check_sp(win10:1, win10x64:1, win2016:1) <= 0){\n exit(0);\n}\n\nsysPath = smb_get_system32root();\nif(!sysPath)\n exit(0);\n\nedgeVer = fetch_file_version(sysPath:sysPath, file_name:\"edgehtml.dll\");\nif(!edgeVer)\n exit(0);\n\nif(version_in_range(version:edgeVer, test_version:\"11.0.14393.0\", test_version2:\"11.0.14393.2968\")) {\n report = report_fixed_ver(file_checked:sysPath + \"\\Edgehtml.dll\",\n file_version:edgeVer, vulnerable_range:\"11.0.14393.0 - 11.0.14393.2968\");\n security_message(data:report);\n exit(0);\n}\n\nexit(99);\n", "cvss": {"score": 9.3, "vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-07-21T20:40:47", "description": "This host is missing a critical security\n update according to Microsoft KB4499154", "cvss3": {}, "published": "2019-05-15T00:00:00", "type": "openvas", "title": "Microsoft Windows Multiple Vulnerabilities (KB4499154)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2019-0683", "CVE-2019-0864", "CVE-2018-12126", "CVE-2019-0890", "CVE-2019-0891", "CVE-2019-0921", "CVE-2019-0727", "CVE-2019-0734", "CVE-2019-0893", "CVE-2019-0918", "CVE-2018-11091", "CVE-2019-0981", "CVE-2019-0889", "CVE-2019-0896", "CVE-2019-0899", "CVE-2019-0913", "CVE-2019-0882", "CVE-2019-0901", "CVE-2019-0758", "CVE-2019-0707", "CVE-2019-0900", "CVE-2019-0930", "CVE-2019-0863", "CVE-2018-12127", "CVE-2019-0938", "CVE-2019-0902", "CVE-2019-0940", "CVE-2019-0820", "CVE-2019-0916", "CVE-2019-0903", "CVE-2019-0917", "CVE-2019-0898", "CVE-2019-0915", "CVE-2019-0936", "CVE-2019-0911", "CVE-2019-0924", "CVE-2019-0884", "CVE-2019-0897", "CVE-2019-0885", "CVE-2019-0961", "CVE-2019-0894", "CVE-2019-0942", "CVE-2019-0912", "CVE-2019-0733", "CVE-2019-0914", "CVE-2019-0881", "CVE-2019-0922", "CVE-2019-0980", "CVE-2018-12130", "CVE-2019-0895"], "modified": "2020-07-17T00:00:00", "id": "OPENVAS:1361412562310815048", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310815048", "sourceData": "# Copyright (C) 2019 Greenbone Networks GmbH\n# Some text descriptions might be excerpted from (a) referenced\n# source(s), and are Copyright (C) by the respective right holder(s).\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.815048\");\n script_version(\"2020-07-17T05:57:41+0000\");\n script_cve_id(\"CVE-2018-11091\", \"CVE-2018-12126\", \"CVE-2018-12127\", \"CVE-2018-12130\",\n \"CVE-2019-0683\", \"CVE-2019-0707\", \"CVE-2019-0727\", \"CVE-2019-0733\",\n \"CVE-2019-0734\", \"CVE-2019-0758\", \"CVE-2019-0820\", \"CVE-2019-0863\",\n \"CVE-2019-0864\", \"CVE-2019-0881\", \"CVE-2019-0882\", \"CVE-2019-0884\",\n \"CVE-2019-0885\", \"CVE-2019-0889\", \"CVE-2019-0890\", \"CVE-2019-0891\",\n \"CVE-2019-0893\", \"CVE-2019-0894\", \"CVE-2019-0895\", \"CVE-2019-0896\",\n \"CVE-2019-0897\", \"CVE-2019-0898\", \"CVE-2019-0899\", \"CVE-2019-0900\",\n \"CVE-2019-0901\", \"CVE-2019-0902\", \"CVE-2019-0903\", \"CVE-2019-0911\",\n \"CVE-2019-0912\", \"CVE-2019-0913\", \"CVE-2019-0914\", \"CVE-2019-0915\",\n \"CVE-2019-0916\", \"CVE-2019-0917\", \"CVE-2019-0918\", \"CVE-2019-0921\",\n \"CVE-2019-0922\", \"CVE-2019-0924\", \"CVE-2019-0930\", \"CVE-2019-0936\",\n \"CVE-2019-0938\", \"CVE-2019-0940\", \"CVE-2019-0942\", \"CVE-2019-0961\",\n \"CVE-2019-0980\", \"CVE-2019-0981\");\n script_tag(name:\"cvss_base\", value:\"9.3\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"2020-07-17 05:57:41 +0000 (Fri, 17 Jul 2020)\");\n script_tag(name:\"creation_date\", value:\"2019-05-15 09:56:34 +0530 (Wed, 15 May 2019)\");\n script_name(\"Microsoft Windows Multiple Vulnerabilities (KB4499154)\");\n\n script_tag(name:\"summary\", value:\"This host is missing a critical security\n update according to Microsoft KB4499154\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present\n on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws exists as,\n\n - Windows Jet Database Engine improperly handles objects in memory.\n\n - Chakra scripting engine improperly handles objects in memory in Microsoft Edge.\n\n - Windows Error Reporting (WER) improperly handles files.\n\n - An error in Windows Defender Application Control (WDAC) which could allow an\n attacker to bypass WDAC enforcement.\n\n Please see the references for more information about the vulnerabilities.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow an attacker\n to execute arbitrary code on a victim system, escalate privileges, bypass\n security restrictions, disclose sensitive information and cause a denial of\n service condition on a victim system.\");\n\n script_tag(name:\"affected\", value:\"- Microsoft Windows 10 for 32-bit Systems\n\n - Microsoft Windows 10 for x64-based Systems\");\n\n script_tag(name:\"solution\", value:\"The vendor has released updates. Please see\n the references for more information.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"executable_version\");\n script_xref(name:\"URL\", value:\"https://support.microsoft.com/en-us/help/4499154\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2019 Greenbone Networks GmbH\");\n script_family(\"Windows : Microsoft Bulletins\");\n script_dependencies(\"smb_reg_service_pack.nasl\");\n script_require_ports(139, 445);\n script_mandatory_keys(\"SMB/WindowsVersion\");\n exit(0);\n}\n\ninclude(\"smb_nt.inc\");\ninclude(\"secpod_reg.inc\");\ninclude(\"version_func.inc\");\ninclude(\"secpod_smb_func.inc\");\n\nif(hotfix_check_sp(win10:1, win10x64:1) <= 0){\n exit(0);\n}\n\nsysPath = smb_get_system32root();\nif(!sysPath)\n exit(0);\n\nedgeVer = fetch_file_version(sysPath:sysPath, file_name:\"edgehtml.dll\");\nif(!edgeVer)\n exit(0);\n\nif(version_in_range(version:edgeVer, test_version:\"11.0.10240.0\", test_version2:\"11.0.10240.18214\")) {\n report = report_fixed_ver(file_checked:sysPath + \"\\Edgehtml.dll\",\n file_version:edgeVer, vulnerable_range:\"11.0.10240.0 - 11.0.10240.18214\");\n security_message(data:report);\n exit(0);\n}\n\nexit(99);\n", "cvss": {"score": 9.3, "vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-07-21T20:40:48", "description": "This host is missing a critical security\n update according to Microsoft KB4499164.", "cvss3": {}, "published": "2019-05-15T00:00:00", "type": "openvas", "title": "Microsoft Windows Multiple Vulnerabilities (KB4499164)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2019-0683", "CVE-2018-12126", "CVE-2019-0890", "CVE-2019-0891", "CVE-2019-0921", "CVE-2019-0734", "CVE-2019-0893", "CVE-2019-0918", "CVE-2018-11091", "CVE-2019-0889", "CVE-2019-0896", "CVE-2019-0899", "CVE-2019-0882", "CVE-2019-0901", "CVE-2019-0758", "CVE-2019-0900", "CVE-2019-0930", "CVE-2019-0863", "CVE-2018-12127", "CVE-2019-0902", "CVE-2019-0940", "CVE-2019-0903", "CVE-2019-0725", "CVE-2019-0898", "CVE-2019-0708", "CVE-2019-0936", "CVE-2019-0911", "CVE-2019-0884", "CVE-2019-0897", "CVE-2019-0885", "CVE-2019-0961", "CVE-2019-0894", "CVE-2019-0881", "CVE-2018-12130", "CVE-2019-0895"], "modified": "2020-07-17T00:00:00", "id": "OPENVAS:1361412562310815051", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310815051", "sourceData": "# Copyright (C) 2019 Greenbone Networks GmbH\n# Some text descriptions might be excerpted from (a) referenced\n# source(s), and are Copyright (C) by the respective right holder(s).\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.815051\");\n script_version(\"2020-07-17T05:57:41+0000\");\n script_cve_id(\"CVE-2018-11091\", \"CVE-2018-12126\", \"CVE-2018-12127\", \"CVE-2018-12130\",\n \"CVE-2019-0683\", \"CVE-2019-0708\", \"CVE-2019-0725\", \"CVE-2019-0734\",\n \"CVE-2019-0758\", \"CVE-2019-0863\", \"CVE-2019-0881\", \"CVE-2019-0882\",\n \"CVE-2019-0884\", \"CVE-2019-0885\", \"CVE-2019-0889\", \"CVE-2019-0890\",\n \"CVE-2019-0891\", \"CVE-2019-0893\", \"CVE-2019-0894\", \"CVE-2019-0895\",\n \"CVE-2019-0896\", \"CVE-2019-0897\", \"CVE-2019-0898\", \"CVE-2019-0899\",\n \"CVE-2019-0900\", \"CVE-2019-0901\", \"CVE-2019-0902\", \"CVE-2019-0903\",\n \"CVE-2019-0911\", \"CVE-2019-0918\", \"CVE-2019-0921\", \"CVE-2019-0930\",\n \"CVE-2019-0936\", \"CVE-2019-0940\", \"CVE-2019-0961\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"2020-07-17 05:57:41 +0000 (Fri, 17 Jul 2020)\");\n script_tag(name:\"creation_date\", value:\"2019-05-15 10:16:13 +0530 (Wed, 15 May 2019)\");\n script_name(\"Microsoft Windows Multiple Vulnerabilities (KB4499164)\");\n\n script_tag(name:\"summary\", value:\"This host is missing a critical security\n update according to Microsoft KB4499164.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on\n the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws exist as,\n\n - Windows Jet Database Engine improperly handles objects in memory.\n\n - Windows Graphics Device Interface (GDI) improperly handles objects in the\n memory.\n\n - Internet Explorer improperly handles URLs.\n\n - Windows fails to properly handle certain symbolic links.\n\n - An error Active Directory Forest trusts due to a default setting.\n\n - Windows Server DHCP service improperly process specially crafted packets.\n\n - Remote Code Execution Vulnerability in Windows Remote Desktop Service (Bluekeep).\n\n Please see the references for more information about the vulnerabilities.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow\n an attacker to execute arbitrary code on a victim system, obtain information to\n further compromise the user's system, gain elevated privileges, conduct remote\n code execution and conduct spoofing attack.\");\n\n script_tag(name:\"affected\", value:\"- Microsoft Windows 7 for 32-bit/x64 Systems Service Pack 1\n\n - Microsoft Windows Server 2008 R2 for x64-based Systems Service Pack 1\");\n\n script_tag(name:\"solution\", value:\"The vendor has released updates. Please see\n the references for more information.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"executable_version\");\n script_xref(name:\"URL\", value:\"https://support.microsoft.com/en-us/help/4499164\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2019 Greenbone Networks GmbH\");\n script_family(\"Windows : Microsoft Bulletins\");\n script_dependencies(\"smb_reg_service_pack.nasl\");\n script_require_ports(139, 445);\n script_mandatory_keys(\"SMB/WindowsVersion\");\n exit(0);\n}\n\ninclude(\"smb_nt.inc\");\ninclude(\"secpod_reg.inc\");\ninclude(\"version_func.inc\");\ninclude(\"secpod_smb_func.inc\");\n\nif(hotfix_check_sp(win7:2, win7x64:2, win2008r2:2) <= 0){\n exit(0);\n}\n\ndllPath = smb_get_system32root();\nif(!dllPath)\n exit(0);\n\nfileVer = fetch_file_version(sysPath:dllPath, file_name:\"Ntdll.dll\");\nif(!fileVer)\n exit(0);\n\nif(version_is_less(version:fileVer, test_version:\"6.1.7601.24441\")) {\n report = report_fixed_ver(file_checked:dllPath + \"\\Ntdll.dll\",\n file_version:fileVer, vulnerable_range:\"Less than 6.1.7601.24441\");\n security_message(data:report);\n exit(0);\n}\n\nexit(99);\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-06-05T16:27:28", "description": "This host is missing a critical security\n update according to Microsoft KB4499151", "cvss3": {}, "published": "2019-05-15T00:00:00", "type": "openvas", "title": "Microsoft Windows Multiple Vulnerabilities (KB4499151)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2019-0683", "CVE-2018-12126", "CVE-2019-0890", "CVE-2019-0891", "CVE-2019-0921", "CVE-2019-0734", "CVE-2019-0893", "CVE-2019-0918", "CVE-2018-11091", "CVE-2019-0889", "CVE-2019-0896", "CVE-2019-0899", "CVE-2019-0882", "CVE-2019-0901", "CVE-2019-0758", "CVE-2019-0707", "CVE-2019-0900", "CVE-2019-0930", "CVE-2019-0863", "CVE-2018-12127", "CVE-2019-0902", "CVE-2019-0940", "CVE-2019-0903", "CVE-2019-0725", "CVE-2019-0898", "CVE-2019-0936", "CVE-2019-0911", "CVE-2019-0884", "CVE-2019-0897", "CVE-2019-0885", "CVE-2019-0961", "CVE-2019-0894", "CVE-2019-0881", "CVE-2018-12130", "CVE-2019-0895"], "modified": "2020-06-04T00:00:00", "id": "OPENVAS:1361412562310815052", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310815052", "sourceData": "# Copyright (C) 2019 Greenbone Networks GmbH\n# Some text descriptions might be excerpted from (a) referenced\n# source(s), and are Copyright (C) by the respective right holder(s).\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.815052\");\n script_version(\"2020-06-04T09:02:37+0000\");\n script_cve_id(\"CVE-2018-11091\", \"CVE-2018-12126\", \"CVE-2018-12127\", \"CVE-2018-12130\",\n \"CVE-2019-0683\", \"CVE-2019-0707\", \"CVE-2019-0725\", \"CVE-2019-0734\",\n \"CVE-2019-0758\", \"CVE-2019-0863\", \"CVE-2019-0881\", \"CVE-2019-0882\",\n \"CVE-2019-0884\", \"CVE-2019-0885\", \"CVE-2019-0889\", \"CVE-2019-0890\",\n \"CVE-2019-0891\", \"CVE-2019-0893\", \"CVE-2019-0894\", \"CVE-2019-0895\",\n \"CVE-2019-0896\", \"CVE-2019-0897\", \"CVE-2019-0898\", \"CVE-2019-0899\",\n \"CVE-2019-0900\", \"CVE-2019-0901\", \"CVE-2019-0902\", \"CVE-2019-0903\",\n \"CVE-2019-0911\", \"CVE-2019-0918\", \"CVE-2019-0921\", \"CVE-2019-0930\",\n \"CVE-2019-0936\", \"CVE-2019-0940\", \"CVE-2019-0961\");\n script_tag(name:\"cvss_base\", value:\"9.3\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"2020-06-04 09:02:37 +0000 (Thu, 04 Jun 2020)\");\n script_tag(name:\"creation_date\", value:\"2019-05-15 10:50:54 +0530 (Wed, 15 May 2019)\");\n script_name(\"Microsoft Windows Multiple Vulnerabilities (KB4499151)\");\n\n script_tag(name:\"summary\", value:\"This host is missing a critical security\n update according to Microsoft KB4499151\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on\n the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws exists as,\n\n - Scripting engine improperly handles objects in memory in Microsoft browsers.\n\n - Windows Error Reporting (WER) improperly handles files.\n\n - Microsoft Windows OLE fails to properly validate user input.\n\n - An error in Microsoft Windows when a man-in-the-middle attacker is able to\n successfully decode and replace authentication request using Kerberos.\n\n - Windows Kernel improperly handles key enumeration.\n\n - Windows Jet Database Engine improperly handles objects in memory.\n\n - Windows GDI component improperly discloses the contents of its memory.\n\n - Speculative execution side channel vulnerabilities known as Microarchitectural\n Data Sampling.\n\n - Microsoft browsers improperly access objects in memory.\n\n - Internet Explorer improperly handles URLs and objects in memory.\n\n - An error in the Network Driver Interface Specification (NDIS).\n\n - Windows fails to properly handle certain symbolic links.\n\n - Windows Server DHCP service improperly process specially crafted packets.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow a remote\n attacker to elevate privileges, execute arbitrary code, read unauthorized\n information and take control of the affected system.\");\n\n script_tag(name:\"affected\", value:\"- Microsoft Windows 8.1 for 32-bit/x64\n\n - Microsoft Windows Server 2012 R2\");\n\n script_tag(name:\"solution\", value:\"The vendor has released updates. Please see\n the references for more information.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"executable_version\");\n script_xref(name:\"URL\", value:\"https://support.microsoft.com/en-us/help/4499151\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2019 Greenbone Networks GmbH\");\n script_family(\"Windows : Microsoft Bulletins\");\n script_dependencies(\"smb_reg_service_pack.nasl\");\n script_mandatory_keys(\"SMB/WindowsVersion\");\n script_require_ports(139, 445);\n exit(0);\n}\n\ninclude(\"smb_nt.inc\");\ninclude(\"secpod_reg.inc\");\ninclude(\"version_func.inc\");\ninclude(\"secpod_smb_func.inc\");\n\nif(hotfix_check_sp(win8_1:1, win8_1x64:1, win2012R2:1) <= 0){\n exit(0);\n}\n\nsysPath = smb_get_system32root();\nif(!sysPath ){\n exit(0);\n}\n\nfileVer = fetch_file_version(sysPath:sysPath, file_name:\"inetcomm.dll\");\nif(!fileVer){\n exit(0);\n}\n\nif(version_is_less(version:fileVer, test_version:\"6.3.9600.19355\"))\n{\n report = report_fixed_ver(file_checked:sysPath + \"\\Inetcomm.dll\",\n file_version:fileVer, vulnerable_range:\"Less than 6.3.9600.19355\");\n security_message(data:report);\n exit(0);\n}\nexit(99);\n", "cvss": {"score": 9.3, "vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-07-21T20:40:55", "description": "This host is missing a critical security\n update according to Microsoft KB4499149.", "cvss3": {}, "published": "2019-05-15T00:00:00", "type": "openvas", "title": "Microsoft Windows Multiple Vulnerabilities (KB4499149)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2019-0890", "CVE-2019-0891", "CVE-2019-0921", "CVE-2019-0734", "CVE-2019-0893", "CVE-2019-0918", "CVE-2019-0889", "CVE-2019-0896", "CVE-2019-0899", "CVE-2019-0882", "CVE-2019-0901", "CVE-2019-0758", "CVE-2019-0900", "CVE-2019-0930", "CVE-2019-0902", "CVE-2019-0903", "CVE-2019-0898", "CVE-2019-0708", "CVE-2019-0936", "CVE-2019-0884", "CVE-2019-0897", "CVE-2019-0885", "CVE-2019-0961", "CVE-2019-0894", "CVE-2019-0881", "CVE-2019-0895"], "modified": "2020-07-17T00:00:00", "id": "OPENVAS:1361412562310815054", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310815054", "sourceData": "# Copyright (C) 2019 Greenbone Networks GmbH\n# Some text descriptions might be excerpted from (a) referenced\n# source(s), and are Copyright (C) by the respective right holder(s).\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.815054\");\n script_version(\"2020-07-17T05:57:41+0000\");\n script_cve_id(\"CVE-2019-0708\", \"CVE-2019-0734\", \"CVE-2019-0758\", \"CVE-2019-0881\",\n \"CVE-2019-0882\", \"CVE-2019-0884\", \"CVE-2019-0885\", \"CVE-2019-0889\",\n \"CVE-2019-0890\", \"CVE-2019-0891\", \"CVE-2019-0893\", \"CVE-2019-0894\",\n \"CVE-2019-0895\", \"CVE-2019-0896\", \"CVE-2019-0897\", \"CVE-2019-0898\",\n \"CVE-2019-0899\", \"CVE-2019-0900\", \"CVE-2019-0901\", \"CVE-2019-0902\",\n \"CVE-2019-0903\", \"CVE-2019-0918\", \"CVE-2019-0921\", \"CVE-2019-0930\",\n \"CVE-2019-0936\", \"CVE-2019-0961\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"2020-07-17 05:57:41 +0000 (Fri, 17 Jul 2020)\");\n script_tag(name:\"creation_date\", value:\"2019-05-15 10:16:13 +0530 (Wed, 15 May 2019)\");\n script_name(\"Microsoft Windows Multiple Vulnerabilities (KB4499149)\");\n\n script_tag(name:\"summary\", value:\"This host is missing a critical security\n update according to Microsoft KB4499149.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present\n on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws exists as,\n\n - Windows GDI component improperly discloses the contents of its memory.\n\n - Windows Kernel improperly handles key enumeration.\n\n - Scripting engine handles objects in memory in Microsoft browsers.\n\n - Windows Jet Database Engine improperly handles objects in memory.\n\n - Remote Code Execution Vulnerability in Windows Remote Desktop Service (Bluekeep).\n\n Please see the references for more information about the vulnerabilities.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow an attacker\n to execute arbitrary code on a victim system, escalate privileges, conduct\n spoofing and disclose sensitive information.\");\n\n script_tag(name:\"affected\", value:\"- Microsoft Windows Server 2008 for 32-bit Systems Service Pack 2\n\n - Microsoft Windows Server 2008 for x64-based Systems Service Pack 2\");\n\n script_tag(name:\"solution\", value:\"The vendor has released updates. Please see\n the references for more information.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"executable_version\");\n script_xref(name:\"URL\", value:\"https://support.microsoft.com/en-us/help/4499149\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2019 Greenbone Networks GmbH\");\n script_family(\"Windows : Microsoft Bulletins\");\n script_dependencies(\"smb_reg_service_pack.nasl\");\n script_require_ports(139, 445);\n script_mandatory_keys(\"SMB/WindowsVersion\");\n exit(0);\n}\n\ninclude(\"smb_nt.inc\");\ninclude(\"secpod_reg.inc\");\ninclude(\"version_func.inc\");\ninclude(\"secpod_smb_func.inc\");\n\nif(hotfix_check_sp(win2008:3, win2008x64:3) <= 0){\n exit(0);\n}\n\nsysPath = smb_get_system32root();\nif(!sysPath)\n exit(0);\n\nntlVer = fetch_file_version(sysPath:sysPath, file_name:\"Ntoskrnl.exe\");\nif(!ntlVer)\n exit(0);\n\nif(version_is_less(version:ntlVer, test_version:\"6.0.6003.20512\")) {\n report = report_fixed_ver(file_checked:sysPath + \"\\Ntoskrnl.exe\",\n file_version:ntlVer, vulnerable_range:\"Less than 6.0.6003.20512\");\n security_message(data:report);\n exit(0);\n}\n\nexit(99);\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "talosblog": [{"lastseen": "2019-05-21T14:19:54", "description": "[](<http://3.bp.blogspot.com/-bIERk6jqSvs/XKypl8tltSI/AAAAAAAAFxU/d9l6_EW1Czs7DzBngmhg8pjdPfhPAZ3yACK4BGAYYCw/s1600/recurring%2Bblog%2Bimages_patch%2Btuesday.jpg>) \n \n \n \n \n \n \n \n \n \n \n \n \n \n \nMicrosoft released its monthly security update today, disclosing a variety of vulnerabilities in several of its products. The latest Patch Tuesday covers 79 vulnerabilities, 22 of which are rated \u201ccritical,\" 55 that are considered \"important\" and one \"moderate.\" This release also includes two critical advisories: one covering Microsoft Live accounts and another addressing updates to Adobe Flash Player. \n \nThis month\u2019s security update covers security issues in a variety of Microsoft\u2019s products, including the Scripting Engine, the Microsoft Edge web browser and GDI+. For more on our coverage of these bugs, check out the Snort blog post [here](<https://blog.snort.org/2019/05/snort-rule-update-for-may-14-2019.html>), covering all of the new rules we have for this release. \n \n\n\n### Critical vulnerabilities\n\nMicrosoft disclosed 22 critical vulnerabilities this month, seven of which we will highlight below. \n \n[CVE-2019-0884](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0884>), [CVE-2019-0911](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0911>) and [CVE-2019-0918](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0918>) are memory corruption vulnerabilities that exist in the scripting engine when it handles objects in memory in Microsoft browsers. These bugs could corrupt memory in a way that an attacker could gain the ability to remotely execute code in the context of the current user. An attacker could exploit these vulnerabilities by either tricking the user into opening a specially crafted web page while using a Microsoft web browser, or by embedding an ActiveX control marked \"safe for initialization\" in a specific application or Microsoft Office document that utilizes the browser rendering engine. \n \n[CVE-2019-0903](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0903>) is a remote code execution vulnerability in the GDI+ API. An attacker could use the vulnerability to take complete control of the system and execute, install and delete programs in the context of the current user. An attacker could exploit this bug by tricking a user into visiting a specially crafted, malicious web page or by convincing them to open a malicious email attachment. \n \n[CVE-2019-0926](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0926>) is a memory corruption vulnerability in Microsoft Edge that exists when the web browser improperly accesses objects in memory. An attacker could exploit this vulnerability by tricking the user into opening a specially crafted web page in Edge. This would eventually allow the attacker to corrupt memory in a way that they could then remotely execute code in the context of the current user. \n \n[CVE-2019-0929](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0929>) is a memory corruption vulnerability in Microsoft Internet Explorer that exists in the way the web browser handles objects in memory. An attacker could exploit this vulnerability by tricking the user into opening a specially crafted web page in Internet Explorer. This would eventually allow the attacker to corrupt memory in a way that they could then remotely execute code in the context of the current user. \n \n[CVE-2019-0708](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708>) is a remote code execution vulnerability in Remote Desktop Services \u2013 formerly known as Terminal Services. The vulnerability requires no user interaction and is pre-authentication. Microsoft specifically warned against this bug because it makes the vulnerability \"wormable,\" meaning future malware that exploits this vulnerability could spread from system to system. An attacker could exploit this vulnerability by sending a specially crafted request to the target system's Remote Desktop Service via RDP. Snort rule 50137 coverages indicators associated with this vulnerability. \n \nThe other critical vulnerabilities are: \n\n\n * [CVE-2019-0940](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0940>)\n * [CVE-2019-0725](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0725>)\n * [CVE-2019-0912](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0912>)\n * [CVE-2019-0913](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0913>)\n * [CVE-2019-0914](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0914>)\n * [CVE-2019-0915](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0915>)\n * [CVE-2019-0916](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0916>)\n * [CVE-2019-0917](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0917>)\n * [CVE-2019-0922](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0922>)\n * [CVE-2019-0924](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0924>)\n * [CVE-2019-0925](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0925>)\n * [CVE-2019-0927](<whttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0927>)\n * [CVE-2019-0933](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0933>)\n * [CVE-2019-0937](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0937>)\n * [CVE-2019-0953](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0953>)\n\n### Important vulnerabilities\n\nThis release also contains 55 important vulnerabilities, one of which we will highlight below. \n \n[CVE-2019-0885](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0885>) is a remote code execution vulnerability in Windows OLE that exists when OLE fails to properly validate user input. An attacker could exploit this bug in a way that would allow them to execute malicious code on the system. This bug can be exploited when a user opens a specially crafted file or program, leading Windows to execute the desired code. \n \nThe other important vulnerabilities are: \n\n\n * [CVE-2019-0707](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0707>)\n * [CVE-2019-0727](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0727>)\n * [CVE-2019-0733](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0733>)\n * [CVE-2019-0734](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0734>)\n * [CVE-2019-0758](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0758>)\n * [CVE-2019-0819](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0819>)\n * [CVE-2019-0820](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820>)\n * [CVE-2019-0863](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0863>)\n * [CVE-2019-0864](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0864>)\n * [CVE-2019-0872](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0872>)\n * [CVE-2019-0881](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0881>)\n * [CVE-2019-0882](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0882>)\n * [CVE-2019-0886](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0886>)\n * [CVE-2019-0889](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0889>)\n * [CVE-2019-0890](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0890>)\n * [CVE-2019-0891](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0891>)\n * [CVE-2019-0892](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0892>)\n * [CVE-2019-0893](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0893>)\n * [CVE-2019-0894](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0894>)\n * [CVE-2019-0895](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0895>)\n * [CVE-2019-0896](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0896>)\n * [CVE-2019-0897](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0897>)\n * [CVE-2019-0898](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0898>)\n * [CVE-2019-0899](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0899>)\n * [CVE-2019-0900](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0900>)\n * [CVE-2019-0901](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0901>)\n * [CVE-2019-0902](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0902>)\n * [CVE-2019-0921](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0921>)\n * [CVE-2019-0923](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0923>)\n * [CVE-2019-0930](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0930>)\n * [CVE-2019-0931](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0931>)\n * [CVE-2019-0932](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0932>)\n * [CVE-2019-0936](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0936>)\n * [CVE-2019-0938](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0938>)\n * [CVE-2019-0942](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0942>)\n * [CVE-2019-0945](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0945>)\n * [CVE-2019-0946](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0946>)\n * [CVE-2019-0947](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0947>)\n * [CVE-2019-0949](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0949>)\n * [CVE-2019-0950](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0950>)\n * [CVE-2019-0951](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0951>)\n * [CVE-2019-0952](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0952>)\n * [CVE-2019-0956](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0956>)\n * [CVE-2019-0957](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0957>)\n * [CVE-2019-0958](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0958>)\n * [CVE-2019-0961](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0961>)\n * [CVE-2019-0963](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0963>)\n * [CVE-2019-0976](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0976>)\n * [CVE-2019-0979](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0979>)\n * [CVE-2019-0980](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0980>)\n * [CVE-2019-0981](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0981>)\n * [CVE-2019-0982](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0982>)\n * [CVE-2019-0995](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0995>)\n * [CVE-2019-1000](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1000>)\n * [CVE-2019-1008](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1008>)\n\n### Moderate vulnerability\n\nThere is one moderate vulnerability, [CVE-2019-0971](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0971>), an information disclosure vulnerability in Azure DevOps. \n\n\n### Coverage \n\nIn response to these vulnerability disclosures, Talos is releasing the following SNORT\u24c7 rules that detect attempts to exploit them. Please note that additional rules may be released at a future date and current rules are subject to change pending additional information. Firepower customers should use the latest update to their ruleset by updating their SRU. Open Source Snort Subscriber Rule Set customers can stay up-to-date by downloading the latest rule pack available for purchase on Snort.org. \n \nSnort rules: [50068 - 50091, 50115 - 50119, 50120 - 50122](<https://snort.org/advisories/talos-rules-2019-05-14>), [50137](<https://snort.org/advisories/talos-rules-2019-05-20>)\n\n", "cvss3": {}, "published": "2019-05-21T06:00:43", "type": "talosblog", "title": "Microsoft Patch Tuesday \u2014 May 2019: Vulnerability disclosures and Snort coverage", "bulletinFamily": "blog", "cvss2": {}, "cvelist": ["CVE-2019-0707", "CVE-2019-0708", "CVE-2019-0725", "CVE-2019-0727", "CVE-2019-0733", "CVE-2019-0734", "CVE-2019-0758", "CVE-2019-0819", "CVE-2019-0820", "CVE-2019-0863", "CVE-2019-0864", "CVE-2019-0872", "CVE-2019-0881", "CVE-2019-0882", "CVE-2019-0884", "CVE-2019-0885", "CVE-2019-0886", "CVE-2019-0889", "CVE-2019-0890", "CVE-2019-0891", "CVE-2019-0892", "CVE-2019-0893", "CVE-2019-0894", "CVE-2019-0895", "CVE-2019-0896", "CVE-2019-0897", "CVE-2019-0898", "CVE-2019-0899", "CVE-2019-0900", "CVE-2019-0901", "CVE-2019-0902", "CVE-2019-0903", "CVE-2019-0911", "CVE-2019-0912", "CVE-2019-0913", "CVE-2019-0914", "CVE-2019-0915", "CVE-2019-0916", "CVE-2019-0917", "CVE-2019-0918", "CVE-2019-0921", "CVE-2019-0922", "CVE-2019-0923", "CVE-2019-0924", "CVE-2019-0925", "CVE-2019-0926", "CVE-2019-0927", "CVE-2019-0929", "CVE-2019-0930", "CVE-2019-0931", "CVE-2019-0932", "CVE-2019-0933", "CVE-2019-0936", "CVE-2019-0937", "CVE-2019-0938", "CVE-2019-0940", "CVE-2019-0942", "CVE-2019-0945", "CVE-2019-0946", "CVE-2019-0947", "CVE-2019-0949", "CVE-2019-0950", "CVE-2019-0951", "CVE-2019-0952", "CVE-2019-0953", "CVE-2019-0956", "CVE-2019-0957", "CVE-2019-0958", "CVE-2019-0961", "CVE-2019-0963", "CVE-2019-0971", "CVE-2019-0976", "CVE-2019-0979", "CVE-2019-0980", "CVE-2019-0981", "CVE-2019-0982", "CVE-2019-0995", "CVE-2019-1000", "CVE-2019-1008"], "modified": "2019-05-21T06:00:43", "id": "TALOSBLOG:71D138211697B43CB345A133B54BC824", "href": "http://feedproxy.google.com/~r/feedburner/Talos/~3/aK4UDA6uQc4/MS-Patch-Tuesday-May-2019.html", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "mscve": [{"lastseen": "2023-03-17T02:35:21", "description": "An spoofing vulnerability exists when Internet Explorer improperly handles URLs. An attacker who successfully exploited this vulnerability could trick a user by redirecting the user to a specially crafted website. The specially crafted website could either spoof content or serve as a pivot to chain an attack with other vulnerabilities in web services.\n\nTo exploit the vulnerability, the user must click a specially crafted URL. In an email attack scenario, an attacker could send an email message containing the specially crafted URL to the user in an attempt to convince the user to click it.\n\nIn a web-based attack scenario, an attacker could host a specially crafted website designed to appear as a legitimate website to the user. However, the attacker would have no way to force the user to visit the specially crafted website. The attacker would have to convince the user to visit the specially crafted website, typically by way of enticement in an email or instant message, and then convince the user to interact with content on the website.\n\nThe security update addresses the vulnerability by changing how URLs are handled by Internet Explorer.\n", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 6.5, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 3.6}, "published": "2019-05-14T07:00:00", "type": "mscve", "title": "Internet Explorer Spoofing Vulnerability", "bulletinFamily": "microsoft", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "NONE", "availabilityImpact": "NONE", "integrityImpact": "PARTIAL", "baseScore": 4.3, "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 2.9, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0921"], "modified": "2019-05-14T07:00:00", "id": "MS:CVE-2019-0921", "href": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2019-0921", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}}, {"lastseen": "2023-03-17T02:35:21", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\n\nIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.\n\nThe security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.\n", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-14T07:00:00", "type": "mscve", "title": "Chakra Scripting Engine Memory Corruption Vulnerability", "bulletinFamily": "microsoft", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0917"], "modified": "2019-06-18T07:00:00", "id": "MS:CVE-2019-0917", "href": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2019-0917", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-17T02:35:21", "description": "A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\n\nAn attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.\n\nThe security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.\n", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-14T07:00:00", "type": "mscve", "title": "Microsoft Browser Memory Corruption Vulnerability", "bulletinFamily": "microsoft", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0940"], "modified": "2019-05-14T07:00:00", "id": "MS:CVE-2019-0940", "href": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2019-0940", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-17T02:35:21", "description": "A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\n\nIn a web-based attack scenario, an attacker could host a specially crafted website designed to exploit the vulnerability through a Microsoft browser and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the browser rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.\n\nThe security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.\n", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-14T07:00:00", "type": "mscve", "title": "Scripting Engine Memory Corruption Vulnerability", "bulletinFamily": "microsoft", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0911"], "modified": "2019-05-14T07:00:00", "id": "MS:CVE-2019-0911", "href": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2019-0911", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-17T02:35:21", "description": "A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\n\nAn attacker could host a specially crafted website designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.\n\nThe security update addresses the vulnerability by modifying how Internet Explorer handles objects in memory.\n", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-14T07:00:00", "type": "mscve", "title": "Internet Explorer Memory Corruption Vulnerability", "bulletinFamily": "microsoft", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0929"], "modified": "2019-05-14T07:00:00", "id": "MS:CVE-2019-0929", "href": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2019-0929", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-17T02:35:21", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\n\nIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.\n\nThe security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.\n", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-14T07:00:00", "type": "mscve", "title": "Chakra Scripting Engine Memory Corruption Vulnerability", "bulletinFamily": "microsoft", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0925"], "modified": "2019-05-14T07:00:00", "id": "MS:CVE-2019-0925", "href": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2019-0925", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-17T02:35:21", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\n\nIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.\n\nThe security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.\n", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-14T07:00:00", "type": "mscve", "title": "Chakra Scripting Engine Memory Corruption Vulnerability", "bulletinFamily": "microsoft", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0912"], "modified": "2019-05-14T07:00:00", "id": "MS:CVE-2019-0912", "href": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2019-0912", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-17T02:35:21", "description": "An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser. An attacker who successfully exploited this vulnerability could gain elevated privileges and break out of the Edge AppContainer sandbox.\n\nThe vulnerability by itself does not allow arbitrary code to run. However, this vulnerability could be used in conjunction with one or more vulnerabilities (for example a remote code execution vulnerability and another elevation of privilege vulnerability) to take advantage of the elevated privileges when running.\n\nThe security update addresses the vulnerability by modifying how Microsoft Edge handles sandboxing.\n", "cvss3": {"exploitabilityScore": 2.2, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "CHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.0, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 6.0}, "published": "2019-05-14T07:00:00", "type": "mscve", "title": "Microsoft Edge Elevation of Privilege Vulnerability", "bulletinFamily": "microsoft", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0938"], "modified": "2019-05-14T07:00:00", "id": "MS:CVE-2019-0938", "href": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2019-0938", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2023-03-17T02:35:21", "description": "A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\n\nAn attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge, and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by way of enticement in an email or Instant Messenger message, or by getting them to open an attachment sent through email.\n\nThe security update addresses the vulnerability by modifying how Microsoft Edge handles objects in memory.\n", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-14T07:00:00", "type": "mscve", "title": "Microsoft Edge Memory Corruption Vulnerability", "bulletinFamily": "microsoft", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0926"], "modified": "2019-05-14T07:00:00", "id": "MS:CVE-2019-0926", "href": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2019-0926", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-17T02:35:21", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\n\nIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.\n\nThe security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.\n", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-14T07:00:00", "type": "mscve", "title": "Chakra Scripting Engine Memory Corruption Vulnerability", "bulletinFamily": "microsoft", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0937"], "modified": "2019-05-14T07:00:00", "id": "MS:CVE-2019-0937", "href": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2019-0937", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-17T02:35:21", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\n\nIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.\n\nThe security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.\n", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-14T07:00:00", "type": "mscve", "title": "Chakra Scripting Engine Memory Corruption Vulnerability", "bulletinFamily": "microsoft", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0915"], "modified": "2019-05-14T07:00:00", "id": "MS:CVE-2019-0915", "href": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2019-0915", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-17T02:35:21", "description": "A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\n\nIn a web-based attack scenario, an attacker could host a specially crafted website designed to exploit the vulnerability through a Microsoft browser and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the browser rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.\n\nThe security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.\n", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-14T07:00:00", "type": "mscve", "title": "Scripting Engine Memory Corruption Vulnerability", "bulletinFamily": "microsoft", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0918"], "modified": "2019-05-14T07:00:00", "id": "MS:CVE-2019-0918", "href": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2019-0918", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-17T02:35:21", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\n\nIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.\n\nThe security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.\n", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-14T07:00:00", "type": "mscve", "title": "Chakra Scripting Engine Memory Corruption Vulnerability", "bulletinFamily": "microsoft", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0933"], "modified": "2019-05-14T07:00:00", "id": "MS:CVE-2019-0933", "href": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2019-0933", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-17T02:35:21", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\n\nIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.\n\nThe security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.\n", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-14T07:00:00", "type": "mscve", "title": "Chakra Scripting Engine Memory Corruption Vulnerability", "bulletinFamily": "microsoft", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0916"], "modified": "2019-05-14T07:00:00", "id": "MS:CVE-2019-0916", "href": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2019-0916", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-17T02:35:21", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\n\nIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.\n\nThe security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.\n", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-14T07:00:00", "type": "mscve", "title": "Chakra Scripting Engine Memory Corruption Vulnerability", "bulletinFamily": "microsoft", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0923"], "modified": "2019-05-14T07:00:00", "id": "MS:CVE-2019-0923", "href": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2019-0923", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-17T02:35:21", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\n\nIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.\n\nThe security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.\n", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-14T07:00:00", "type": "mscve", "title": "Chakra Scripting Engine Memory Corruption Vulnerability", "bulletinFamily": "microsoft", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0924"], "modified": "2019-05-14T07:00:00", "id": "MS:CVE-2019-0924", "href": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2019-0924", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-17T02:35:21", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\n\nIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.\n\nThe security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.\n", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-14T07:00:00", "type": "mscve", "title": "Chakra Scripting Engine Memory Corruption Vulnerability", "bulletinFamily": "microsoft", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0927"], "modified": "2019-05-14T07:00:00", "id": "MS:CVE-2019-0927", "href": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2019-0927", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-17T02:35:21", "description": "An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user\u2019s system.\n\nTo exploit the vulnerability, in a web-based attack scenario, an attacker could host a website in an attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.\n\nThe security update addresses the vulnerability by modifying how Internet Explorer handles objects in memory.\n", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "baseScore": 6.5, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 3.6}, "published": "2019-05-14T07:00:00", "type": "mscve", "title": "Internet Explorer Information Disclosure Vulnerability", "bulletinFamily": "microsoft", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "NONE", "integrityImpact": "NONE", "baseScore": 4.3, "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 2.9, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0930"], "modified": "2019-05-14T07:00:00", "id": "MS:CVE-2019-0930", "href": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2019-0930", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:P/I:N/A:N"}}, {"lastseen": "2023-03-17T02:35:21", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\n\nIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.\n\nThe security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.\n", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-14T07:00:00", "type": "mscve", "title": "Chakra Scripting Engine Memory Corruption Vulnerability", "bulletinFamily": "microsoft", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0922"], "modified": "2019-05-14T07:00:00", "id": "MS:CVE-2019-0922", "href": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2019-0922", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-17T02:35:21", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\n\nIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.\n\nThe security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.\n", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-14T07:00:00", "type": "mscve", "title": "Chakra Scripting Engine Memory Corruption Vulnerability", "bulletinFamily": "microsoft", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0913"], "modified": "2019-05-14T07:00:00", "id": "MS:CVE-2019-0913", "href": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2019-0913", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-17T02:35:21", "description": "A security feature bypass vulnerability exists when urlmon.dll improperly handles certain Mark of the Web queries. The vulnerability allows Internet Explorer to bypass Mark of the Web warnings or restrictions for files downloaded or created in a specific way.\n\nIn a web-based attack scenario, an attacker would need to host a malicious file that is designed to exploit the vulnerability and then convince a user to download the malicious file and then open the file in Internet Explorer.\n\nThe security update addresses the vulnerability by modifying how urlmon.dll handles Mark of the Web queries.\n", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 8.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-14T07:00:00", "type": "mscve", "title": "Internet Explorer Security Feature Bypass Vulnerability", "bulletinFamily": "microsoft", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0995"], "modified": "2019-06-18T07:00:00", "id": "MS:CVE-2019-0995", "href": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2019-0995", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2023-03-17T02:35:21", "description": "A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\n\nIn a web-based attack scenario, an attacker could host a specially crafted website designed to exploit the vulnerability through a Microsoft browser and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the browser rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.\n\nThe security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.\n", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-14T07:00:00", "type": "mscve", "title": "Scripting Engine Memory Corruption Vulnerability", "bulletinFamily": "microsoft", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0884"], "modified": "2019-05-14T07:00:00", "id": "MS:CVE-2019-0884", "href": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2019-0884", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2023-03-17T02:35:21", "description": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\n\nIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.\n\nThe security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.\n", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 7.5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-05-14T07:00:00", "type": "mscve", "title": "Chakra Scripting Engine Memory Corruption Vulnerability", "bulletinFamily": "microsoft", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0914"], "modified": "2019-05-14T07:00:00", "id": "MS:CVE-2019-0914", "href": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2019-0914", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}], "symantec": [{"lastseen": "2021-06-08T19:04:28", "description": "### Description\n\nMicrosoft Internet Explorer is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible.\n\n### Technologies Affected\n\n * Microsoft Internet Explorer 10 \n * Microsoft Internet Explorer 11 \n * Microsoft Internet Explorer 9 \n\n### Recommendations\n\n**Run all software as a nonprivileged user with minimal access rights.** \nTo reduce the impact of latent vulnerabilities, always run nonadministrative software as an unprivileged user with minimal access rights.\n\n**Deploy network intrusion detection systems to monitor network traffic for malicious activity.** \nDeploy NIDS to monitor network traffic for signs of anomalous or suspicious activity. This includes but is not limited to unexplained incoming and outgoing traffic. This may indicate exploit attempts or activity that results from successful exploits.\n\n**Do not follow links provided by unknown or untrusted sources.** \nNever follow links provided by unknown or untrusted sources.\n\n**Set web browser security to disable the execution of script code or active content.** \nSince a successful exploit of this issue allows malicious code to execute in web clients, consider disabling support for script code and active content within the client browser. Note that this mitigation tactic might adversely affect legitimate websites that rely on the execution of browser-based script code.\n\nUpdates are available. Please see the references or vendor advisory for more information.\n", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "symantec", "title": "Microsoft Internet Explorer CVE-2019-0921 Spoofing Vulnerability", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2019-0921"], "modified": "2019-05-14T00:00:00", "id": "SMNTC-108244", "href": "https://www.symantec.com/content/symantec/english/en/security-center/vulnerabilities/writeup.html/108244", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2019-05-14T23:21:27", "description": "### Description\n\nMicrosoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions.\n\n### Technologies Affected\n\n * Microsoft ChakraCore \n * Microsoft Edge \n\n### Recommendations\n\n**Run all software as a nonprivileged user with minimal access rights.** \nTo reduce the impact of latent vulnerabilities, always run nonadministrative software as an unprivileged user with minimal access rights.\n\n**Deploy network intrusion detection systems to monitor network traffic for malicious activity.** \nDeploy NIDS to monitor network traffic for signs of anomalous or suspicious activity. This includes but is not limited to requests that include NOP sleds and unexplained incoming and outgoing traffic. This may indicate exploit attempts or activity that results from successful exploits\n\n**Do not follow links provided by unknown or untrusted sources.** \nWeb users should be cautious about following links to sites that are provided by unfamiliar or suspicious sources. Filtering HTML from emails may help remove a possible vector for transmitting malicious links to users.\n\n**Implement multiple redundant layers of security.** \nMemory-protection schemes (such as nonexecutable stack and heap configurations and randomly mapped memory segments) will complicate exploits of memory-corruption vulnerabilities.\n\nUpdates are available. Please see the references or vendor advisory for more information.\n", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "symantec", "title": "Microsoft Edge Chakra Scripting Engine CVE-2019-0917 Remote Memory Corruption Vulnerability", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2019-0917"], "modified": "2019-05-14T00:00:00", "id": "SMNTC-108238", "href": "https://www.symantec.com/content/symantec/english/en/security-center/vulnerabilities/writeup.html/108238", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2021-06-08T19:04:28", "description": "### Description\n\nMicrosoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions.\n\n### Technologies Affected\n\n * Microsoft Edge \n * Microsoft Internet Explorer 10 \n * Microsoft Internet Explorer 11 \n\n### Recommendations\n\n**Run all software as a nonprivileged user with minimal access rights.** \nTo reduce the impact of latent vulnerabilities, always run nonadministrative software as an unprivileged user with minimal access rights.\n\n**Deploy network intrusion detection systems to monitor network traffic for malicious activity.** \nDeploy NIDS to monitor network traffic for signs of anomalous or suspicious activity. This includes but is not limited to requests that include NOP sleds and unexplained incoming and outgoing traffic. This may indicate exploit attempts or activity that results from successful exploits\n\n**Do not follow links provided by unknown or untrusted sources.** \nWeb users should be cautious about following links to sites that are provided by unfamiliar or suspicious sources. Filtering HTML from emails may help remove a possible vector for transmitting malicious links to users.\n\n**Implement multiple redundant layers of security.** \nMemory-protection schemes (such as nonexecutable stack and heap configurations and randomly mapped memory segments) will complicate exploits of memory-corruption vulnerabilities.\n\nUpdates are available. Please see the references or vendor advisory for more information.\n", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "symantec", "title": "Microsoft Internet Explorer and Edge CVE-2019-0940 Remote Memory Corruption Vulnerability", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2019-0940"], "modified": "2019-05-14T00:00:00", "id": "SMNTC-108278", "href": "https://www.symantec.com/content/symantec/english/en/security-center/vulnerabilities/writeup.html/108278", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2021-06-08T19:04:28", "description": "### Description\n\nMicrosoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions.\n\n### Technologies Affected\n\n * Microsoft Internet Explorer 11 \n\n### Recommendations\n\n**Run all software as a nonprivileged user with minimal access rights.** \nTo reduce the impact of latent vulnerabilities, always run nonadministrative software as an unprivileged user with minimal access rights.\n\n**Deploy network intrusion detection systems to monitor network traffic for malicious activity.** \nDeploy NIDS to monitor network traffic for signs of anomalous or suspicious activity. This includes but is not limited to requests that include NOP sleds and unexplained incoming and outgoing traffic. This may indicate exploit attempts or activity that results from successful exploits\n\n**Do not follow links provided by unknown or untrusted sources.** \nWeb users should be cautious about following links to sites that are provided by unfamiliar or suspicious sources. Filtering HTML from emails may help remove a possible vector for transmitting malicious links to users.\n\n**Implement multiple redundant layers of security.** \nMemory-protection schemes (such as nonexecutable stack and heap configurations and randomly mapped memory segments) will complicate exploits of memory-corruption vulnerabilities.\n\nUpdates are available. Please see the references or vendor advisory for more information.\n", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "symantec", "title": "Microsoft Internet Explorer CVE-2019-0929 Remote Memory Corruption Vulnerability", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2019-0929"], "modified": "2019-05-14T00:00:00", "id": "SMNTC-108259", "href": "https://www.symantec.com/content/symantec/english/en/security-center/vulnerabilities/writeup.html/108259", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2019-05-15T01:19:52", "description": "### Description\n\nMicrosoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions.\n\n### Technologies Affected\n\n * Microsoft ChakraCore \n * Microsoft Edge \n\n### Recommendations\n\n**Run all software as a nonprivileged user with minimal access rights.** \nTo reduce the impact of latent vulnerabilities, always run nonadministrative software as an unprivileged user with minimal access rights.\n\n**Deploy network intrusion detection systems to monitor network traffic for malicious activity.** \nDeploy NIDS to monitor network traffic for signs of anomalous or suspicious activity. This includes but is not limited to requests that include NOP sleds and unexplained incoming and outgoing traffic. This may indicate exploit attempts or activity that results from successful exploits\n\n**Do not follow links provided by unknown or untrusted sources.** \nWeb users should be cautious about following links to sites that are provided by unfamiliar or suspicious sources. Filtering HTML from emails may help remove a possible vector for transmitting malicious links to users.\n\n**Implement multiple redundant layers of security.** \nMemory-protection schemes (such as nonexecutable stack and heap configurations and randomly mapped memory segments) will complicate exploits of memory-corruption vulnerabilities.\n\nUpdates are available. Please see the references or vendor advisory for more information.\n", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "symantec", "title": "Microsoft Edge Chakra Scripting Engine CVE-2019-0925 Remote Memory Corruption Vulnerability", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2019-0925"], "modified": "2019-05-14T00:00:00", "id": "SMNTC-108251", "href": "https://www.symantec.com/content/symantec/english/en/security-center/vulnerabilities/writeup.html/108251", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2019-05-14T23:21:25", "description": "### Description\n\nMicrosoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions.\n\n### Technologies Affected\n\n * Microsoft ChakraCore \n * Microsoft Edge \n\n### Recommendations\n\n**Run all software as a nonprivileged user with minimal access rights.** \nTo reduce the impact of latent vulnerabilities, always run nonadministrative software as an unprivileged user with minimal access rights.\n\n**Deploy network intrusion detection systems to monitor network traffic for malicious activity.** \nDeploy NIDS to monitor network traffic for signs of anomalous or suspicious activity. This includes but is not limited to requests that include NOP sleds and unexplained incoming and outgoing traffic. This may indicate exploit attempts or activity that results from successful exploits\n\n**Do not follow links provided by unknown or untrusted sources.** \nWeb users should be cautious about following links to sites that are provided by unfamiliar or suspicious sources. Filtering HTML from emails may help remove a possible vector for transmitting malicious links to users.\n\n**Implement multiple redundant layers of security.** \nMemory-protection schemes (such as nonexecutable stack and heap configurations and randomly mapped memory segments) will complicate exploits of memory-corruption vulnerabilities.\n\nUpdates are available. Please see the references or vendor advisory for more information.\n", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "symantec", "title": "Microsoft Edge Chakra Scripting Engine CVE-2019-0912 Remote Memory Corruption Vulnerability", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2019-0912"], "modified": "2019-05-14T00:00:00", "id": "SMNTC-108229", "href": "https://www.symantec.com/content/symantec/english/en/security-center/vulnerabilities/writeup.html/108229", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2019-05-15T01:19:50", "description": "### Description\n\nMicrosoft Edge is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges.\n\n### Technologies Affected\n\n * Microsoft Edge \n\n### Recommendations\n\n**Block external access at the network boundary, unless external parties require service.** \nFilter access to the affected computer at the network boundary if global access isn't needed. Restricting access to only trusted computers and networks might greatly reduce the likelihood of a successful exploit.\n\n**Run all software as a nonprivileged user with minimal access rights.** \nTo reduce the impact of latent vulnerabilities, always run nonadministrative software as an unprivileged user with minimal access rights.\n\n**Deploy network intrusion detection systems to monitor network traffic for malicious activity.** \nDeploy NIDS to monitor network traffic for signs of anomalous or suspicious activity such as unexplained incoming and outgoing traffic. This may indicate exploit attempts or activity that results from successful exploits.\n\n**Do not follow links provided by unknown or untrusted sources.** \nWeb users should be cautious about following links to sites that are provided by unfamiliar or suspicious sources. Filtering HTML from emails may help remove a possible vector for transmitting malicious links to users.\n\nUpdates are available. Please see the references or vendor advisory for more information.\n", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "symantec", "title": "Microsoft Edge CVE-2019-0938 Remote Privilege Escalation Vulnerability", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2019-0938"], "modified": "2019-05-14T00:00:00", "id": "SMNTC-108276", "href": "https://www.symantec.com/content/symantec/english/en/security-center/vulnerabilities/writeup.html/108276", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2019-05-15T01:19:51", "description": "### Description\n\nMicrosoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions.\n\n### Technologies Affected\n\n * Microsoft Edge \n\n### Recommendations\n\n**Run all software as a nonprivileged user with minimal access rights.** \nTo reduce the impact of latent vulnerabilities, always run nonadministrative software as an unprivileged user with minimal access rights.\n\n**Deploy network intrusion detection systems to monitor network traffic for malicious activity.** \nDeploy NIDS to monitor network traffic for signs of anomalous or suspicious activity. This includes but is not limited to requests that include NOP sleds and unexplained incoming and outgoing traffic. This may indicate exploit attempts or activity that results from successful exploits\n\n**Do not follow links provided by unknown or untrusted sources.** \nWeb users should be cautious about following links to sites that are provided by unfamiliar or suspicious sources. Filtering HTML from emails may help remove a possible vector for transmitting malicious links to users.\n\n**Implement multiple redundant layers of security.** \nMemory-protection schemes (such as nonexecutable stack and heap configurations and randomly mapped memory segments) will complicate exploits of memory-corruption vulnerabilities.\n\nUpdates are available. Please see the references or vendor advisory for more information.\n", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "symantec", "title": "Microsoft Edge CVE-2019-0926 Remote Memory Corruption Vulnerability", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2019-0926"], "modified": "2019-05-14T00:00:00", "id": "SMNTC-108253", "href": "https://www.symantec.com/content/symantec/english/en/security-center/vulnerabilities/writeup.html/108253", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2019-05-15T01:19:56", "description": "### Description\n\nMicrosoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions.\n\n### Technologies Affected\n\n * Microsoft ChakraCore \n * Microsoft Edge \n\n### Recommendations\n\n**Run all software as a nonprivileged user with minimal access rights.** \nTo reduce the impact of latent vulnerabilities, always run nonadministrative software as an unprivileged user with minimal access rights.\n\n**Deploy network intrusion detection systems to monitor network traffic for malicious activity.** \nDeploy NIDS to monitor network traffic for signs of anomalous or suspicious activity. This includes but is not limited to requests that include NOP sleds and unexplained incoming and outgoing traffic. This may indicate exploit attempts or activity that results from successful exploits\n\n**Do not follow links provided by unknown or untrusted sources.** \nWeb users should be cautious about following links to sites that are provided by unfamiliar or suspicious sources. Filtering HTML from emails may help remove a possible vector for transmitting malicious links to users.\n\n**Implement multiple redundant layers of security.** \nMemory-protection schemes (such as nonexecutable stack and heap configurations and randomly mapped memory segments) will complicate exploits of memory-corruption vulnerabilities.\n\nUpdates are available. Please see the references or vendor advisory for more information.\n", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "symantec", "title": "Microsoft Edge Chakra Scripting Engine CVE-2019-0937 Remote Memory Corruption Vulnerability", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2019-0937"], "modified": "2019-05-14T00:00:00", "id": "SMNTC-108258", "href": "https://www.symantec.com/content/symantec/english/en/security-center/vulnerabilities/writeup.html/108258", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2019-05-14T23:21:25", "description": "### Description\n\nMicrosoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions.\n\n### Technologies Affected\n\n * Microsoft ChakraCore \n * Microsoft Edge \n\n### Recommendations\n\n**Run all software as a nonprivileged user with minimal access rights.** \nTo reduce the impact of latent vulnerabilities, always run nonadministrative software as an unprivileged user with minimal access rights.\n\n**Deploy network intrusion detection systems to monitor network traffic for malicious activity.** \nDeploy NIDS to monitor network traffic for signs of anomalous or suspicious activity. This includes but is not limited to requests that include NOP sleds and unexplained incoming and outgoing traffic. This may indicate exploit attempts or activity that results from successful exploits\n\n**Do not follow links provided by unknown or untrusted sources.** \nWeb users should be cautious about following links to sites that are provided by unfamiliar or suspicious sources. Filtering HTML from emails may help remove a possible vector for transmitting malicious links to users.\n\n**Implement multiple redundant layers of security.** \nMemory-protection schemes (such as nonexecutable stack and heap configurations and randomly mapped memory segments) will complicate exploits of memory-corruption vulnerabilities.\n\nUpdates are available. Please see the references or vendor advisory for more information.\n", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "symantec", "title": "Microsoft Edge Chakra Scripting Engine CVE-2019-0915 Remote Memory Corruption Vulnerability", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2019-0915"], "modified": "2019-05-14T00:00:00", "id": "SMNTC-108236", "href": "https://www.symantec.com/content/symantec/english/en/security-center/vulnerabilities/writeup.html/108236", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2021-06-08T19:04:28", "description": "### Description\n\nMicrosoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions.\n\n### Technologies Affected\n\n * Microsoft Internet Explorer 10 \n * Microsoft Internet Explorer 11 \n * Microsoft Internet Explorer 9 \n\n### Recommendations\n\n**Run all software as a nonprivileged user with minimal access rights.** \nTo reduce the impact of latent vulnerabilities, always run nonadministrative software as an unprivileged user with minimal access rights.\n\n**Deploy network intrusion detection systems to monitor network traffic for malicious activity.** \nDeploy NIDS to monitor network traffic for signs of anomalous or suspicious activity. This includes but is not limited to requests that include NOP sleds and unexplained incoming and outgoing traffic. This may indicate exploit attempts or activity that results from successful exploits\n\n**Do not follow links provided by unknown or untrusted sources.** \nWeb users should be cautious about following links to sites that are provided by unfamiliar or suspicious sources. Filtering HTML from emails may help remove a possible vector for transmitting malicious links to users.\n\n**Implement multiple redundant layers of security.** \nMemory-protection schemes (such as nonexecutable stack and heap configurations and randomly mapped memory segments) will complicate exploits of memory-corruption vulnerabilities.\n\nUpdates are available. Please see the references or vendor advisory for more information.\n", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "symantec", "title": "Microsoft Internet Explorer Scripting Engine CVE-2019-0918 Remote Memory Corruption Vulnerability", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2019-0918"], "modified": "2019-05-14T00:00:00", "id": "SMNTC-108242", "href": "https://www.symantec.com/content/symantec/english/en/security-center/vulnerabilities/writeup.html/108242", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2019-05-15T01:19:53", "description": "### Description\n\nMicrosoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions.\n\n### Technologies Affected\n\n * Microsoft ChakraCore \n * Microsoft Edge \n\n### Recommendations\n\n**Run all software as a nonprivileged user with minimal access rights.** \nTo reduce the impact of latent vulnerabilities, always run nonadministrative software as an unprivileged user with minimal access rights.\n\n**Deploy network intrusion detection systems to monitor network traffic for malicious activity.** \nDeploy NIDS to monitor network traffic for signs of anomalous or suspicious activity. This includes but is not limited to requests that include NOP sleds and unexplained incoming and outgoing traffic. This may indicate exploit attempts or activity that results from successful exploits\n\n**Do not follow links provided by unknown or untrusted sources.** \nWeb users should be cautious about following links to sites that are provided by unfamiliar or suspicious sources. Filtering HTML from emails may help remove a possible vector for transmitting malicious links to users.\n\n**Implement multiple redundant layers of security.** \nMemory-protection schemes (such as nonexecutable stack and heap configurations and randomly mapped memory segments) will complicate exploits of memory-corruption vulnerabilities.\n\nUpdates are available. Please see the references or vendor advisory for more information.\n", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "symantec", "title": "Microsoft Edge Chakra Scripting Engine CVE-2019-0933 Remote Memory Corruption Vulnerability", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2019-0933"], "modified": "2019-05-14T00:00:00", "id": "SMNTC-108257", "href": "https://www.symantec.com/content/symantec/english/en/security-center/vulnerabilities/writeup.html/108257", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2019-05-14T23:21:27", "description": "### Description\n\nMicrosoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions.\n\n### Technologies Affected\n\n * Microsoft ChakraCore \n * Microsoft Edge \n\n### Recommendations\n\n**Run all software as a nonprivileged user with minimal access rights.** \nTo reduce the impact of latent vulnerabilities, always run nonadministrative software as an unprivileged user with minimal access rights.\n\n**Deploy network intrusion detection systems to monitor network traffic for malicious activity.** \nDeploy NIDS to monitor network traffic for signs of anomalous or suspicious activity. This includes but is not limited to requests that include NOP sleds and unexplained incoming and outgoing traffic. This may indicate exploit attempts or activity that results from successful exploits\n\n**Do not follow links provided by unknown or untrusted sources.** \nWeb users should be cautious about following links to sites that are provided by unfamiliar or suspicious sources. Filtering HTML from emails may help remove a possible vector for transmitting malicious links to users.\n\n**Implement multiple redundant layers of security.** \nMemory-protection schemes (such as nonexecutable stack and heap configurations and randomly mapped memory segments) will complicate exploits of memory-corruption vulnerabilities.\n\nUpdates are available. Please see the references or vendor advisory for more information.\n", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "symantec", "title": "Microsoft Edge Chakra Scripting Engine CVE-2019-0916 Remote Memory Corruption Vulnerability", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2019-0916"], "modified": "2019-05-14T00:00:00", "id": "SMNTC-108237", "href": "https://www.symantec.com/content/symantec/english/en/security-center/vulnerabilities/writeup.html/108237", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2019-05-15T01:19:57", "description": "### Description\n\nMicrosoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions.\n\n### Technologies Affected\n\n * Microsoft Edge \n\n### Recommendations\n\n**Run all software as a nonprivileged user with minimal access rights.** \nTo reduce the impact of latent vulnerabilities, always run nonadministrative software as an unprivileged user with minimal access rights.\n\n**Deploy network intrusion detection systems to monitor network traffic for malicious activity.** \nDeploy NIDS to monitor network traffic for signs of anomalous or suspicious activity. This includes but is not limited to requests that include NOP sleds and unexplained incoming and outgoing traffic. This may indicate exploit attempts or activity that results from successful exploits\n\n**Do not follow links provided by unknown or untrusted sources.** \nWeb users should be cautious about following links to sites that are provided by unfamiliar or suspicious sources. Filtering HTML from emails may help remove a possible vector for transmitting malicious links to users.\n\n**Implement multiple redundant layers of security.** \nMemory-protection schemes (such as nonexecutable stack and heap configurations and randomly mapped memory segments) will complicate exploits of memory-corruption vulnerabilities.\n\nUpdates are available. Please see the references or vendor advisory for more information.\n", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "symantec", "title": "Microsoft Edge Chakra Scripting Engine CVE-2019-0923 Remote Memory Corruption Vulnerability", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2019-0923"], "modified": "2019-05-14T00:00:00", "id": "SMNTC-108248", "href": "https://www.symantec.com/content/symantec/english/en/security-center/vulnerabilities/writeup.html/108248", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2019-05-15T01:19:53", "description": "### Description\n\nMicrosoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions.\n\n### Technologies Affected\n\n * Microsoft ChakraCore \n * Microsoft Edge \n\n### Recommendations\n\n**Run all software as a nonprivileged user with minimal access rights.** \nTo reduce the impact of latent vulnerabilities, always run nonadministrative software as an unprivileged user with minimal access rights.\n\n**Deploy network intrusion detection systems to monitor network traffic for malicious activity.** \nDeploy NIDS to monitor network traffic for signs of anomalous or suspicious activity. This includes but is not limited to requests that include NOP sleds and unexplained incoming and outgoing traffic. This may indicate exploit attempts or activity that results from successful exploits\n\n**Do not follow links provided by unknown or untrusted sources.** \nWeb users should be cautious about following links to sites that are provided by unfamiliar or suspicious sources. Filtering HTML from emails may help remove a possible vector for transmitting malicious links to users.\n\n**Implement multiple redundant layers of security.** \nMemory-protection schemes (such as nonexecutable stack and heap configurations and randomly mapped memory segments) will complicate exploits of memory-corruption vulnerabilities.\n\nUpdates are available. Please see the references or vendor advisory for more information.\n", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "symantec", "title": "Microsoft Edge Chakra Scripting Engine CVE-2019-0924 Remote Memory Corruption Vulnerability", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2019-0924"], "modified": "2019-05-14T00:00:00", "id": "SMNTC-108250", "href": "https://www.symantec.com/content/symantec/english/en/security-center/vulnerabilities/writeup.html/108250", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2019-05-15T01:19:56", "description": "### Description\n\nMicrosoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions.\n\n### Technologies Affected\n\n * Microsoft ChakraCore \n * Microsoft Edge \n\n### Recommendations\n\n**Run all software as a nonprivileged user with minimal access rights.** \nTo reduce the impact of latent vulnerabilities, always run nonadministrative software as an unprivileged user with minimal access rights.\n\n**Deploy network intrusion detection systems to monitor network traffic for malicious activity.** \nDeploy NIDS to monitor network traffic for signs of anomalous or suspicious activity. This includes but is not limited to requests that include NOP sleds and unexplained incoming and outgoing traffic. This may indicate exploit attempts or activity that results from successful exploits\n\n**Do not follow links provided by unknown or untrusted sources.** \nWeb users should be cautious about following links to sites that are provided by unfamiliar or suspicious sources. Filtering HTML from emails may help remove a possible vector for transmitting malicious links to users.\n\n**Implement multiple redundant layers of security.** \nMemory-protection schemes (such as nonexecutable stack and heap configurations and randomly mapped memory segments) will complicate exploits of memory-corruption vulnerabilities.\n\nUpdates are available. Please see the references or vendor advisory for more information.\n", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "symantec", "title": "Microsoft Edge Chakra Scripting Engine CVE-2019-0927 Remote Memory Corruption Vulnerability", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2019-0927"], "modified": "2019-05-14T00:00:00", "id": "SMNTC-108254", "href": "https://www.symantec.com/content/symantec/english/en/security-center/vulnerabilities/writeup.html/108254", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2021-06-08T19:04:28", "description": "### Description\n\nMicrosoft Internet Explorer is prone to an information-disclosure vulnerability Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks.\n\n### Technologies Affected\n\n * Microsoft Internet Explorer 10 \n * Microsoft Internet Explorer 11 \n * Microsoft Internet Explorer 9 \n\n### Recommendations\n\n**Run all software as a nonprivileged user with minimal access rights.** \nTo reduce the impact of latent vulnerabilities, always run nonadministrative software as an unprivileged user with minimal access rights.\n\n**Deploy network intrusion detection systems to monitor network traffic for malicious activity.** \nDeploy NIDS to monitor network traffic for signs of anomalous or suspicious activity. This includes but is not limited to requests that include NOP sleds and unexplained incoming and outgoing traffic. This may indicate exploit attempts or activity that results from successful exploits\n\n**Do not follow links provided by unknown or untrusted sources.** \nWeb users should be cautious about following links to sites that are provided by unfamiliar or suspicious sources. Filtering HTML from emails may help remove a possible vector for transmitting malicious links to users.\n\n**Implement multiple redundant layers of security.** \nMemory-protection schemes (such as nonexecutable stack and heap configurations and randomly mapped memory segments) will complicate exploits of memory-corruption vulnerabilities.\n\nUpdates are available. Please see the references or vendor advisory for more information.\n", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "symantec", "title": "Microsoft Internet Explorer CVE-2019-0930 Information Disclosure Vulnerability", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2019-0930"], "modified": "2019-05-14T00:00:00", "id": "SMNTC-108275", "href": "https://www.symantec.com/content/symantec/english/en/security-center/vulnerabilities/writeup.html/108275", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2019-05-15T01:19:53", "description": "### Description\n\nMicrosoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions.\n\n### Technologies Affected\n\n * Microsoft ChakraCore \n * Microsoft Edge \n\n### Recommendations\n\n**Run all software as a nonprivileged user with minimal access rights.** \nTo reduce the impact of latent vulnerabilities, always run nonadministrative software as an unprivileged user with minimal access rights.\n\n**Deploy network intrusion detection systems to monitor network traffic for malicious activity.** \nDeploy NIDS to monitor network traffic for signs of anomalous or suspicious activity. This includes but is not limited to requests that include NOP sleds and unexplained incoming and outgoing traffic. This may indicate exploit attempts or activity that results from successful exploits\n\n**Do not follow links provided by unknown or untrusted sources.** \nWeb users should be cautious about following links to sites that are provided by unfamiliar or suspicious sources. Filtering HTML from emails may help remove a possible vector for transmitting malicious links to users.\n\n**Implement multiple redundant layers of security.** \nMemory-protection schemes (such as nonexecutable stack and heap configurations and randomly mapped memory segments) will complicate exploits of memory-corruption vulnerabilities.\n\nUpdates are available. Please see the references or vendor advisory for more information.\n", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "symantec", "title": "Microsoft Edge Chakra Scripting Engine CVE-2019-0922 Remote Memory Corruption Vulnerability", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2019-0922"], "modified": "2019-05-14T00:00:00", "id": "SMNTC-108246", "href": "https://www.symantec.com/content/symantec/english/en/security-center/vulnerabilities/writeup.html/108246", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2019-05-14T23:21:26", "description": "### Description\n\nMicrosoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions.\n\n### Technologies Affected\n\n * Microsoft ChakraCore \n * Microsoft Edge \n\n### Recommendations\n\n**Run all software as a nonprivileged user with minimal access rights.** \nTo reduce the impact of latent vulnerabilities, always run nonadministrative software as an unprivileged user with minimal access rights.\n\n**Deploy network intrusion detection systems to monitor network traffic for malicious activity.** \nDeploy NIDS to monitor network traffic for signs of anomalous or suspicious activity. This includes but is not limited to requests that include NOP sleds and unexplained incoming and outgoing traffic. This may indicate exploit attempts or activity that results from successful exploits\n\n**Do not follow links provided by unknown or untrusted sources.** \nWeb users should be cautious about following links to sites that are provided by unfamiliar or suspicious sources. Filtering HTML from emails may help remove a possible vector for transmitting malicious links to users.\n\n**Implement multiple redundant layers of security.** \nMemory-protection schemes (such as nonexecutable stack and heap configurations and randomly mapped memory segments) will complicate exploits of memory-corruption vulnerabilities.\n\nUpdates are available. Please see the references or vendor advisory for more information.\n", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "symantec", "title": "Microsoft Edge Chakra Scripting Engine CVE-2019-0913 Remote Memory Corruption Vulnerability", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2019-0913"], "modified": "2019-05-14T00:00:00", "id": "SMNTC-108233", "href": "https://www.symantec.com/content/symantec/english/en/security-center/vulnerabilities/writeup.html/108233", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2021-06-08T19:04:28", "description": "### Description\n\nMicrosoft Internet Explorer is prone to a security-bypass vulnerability. Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and perform unauthorized actions. This may lead to other attacks. Internet Explorer 11 is vulnerable.\n\n### Technologies Affected\n\n * Microsoft Internet Explorer 11 \n\n### Recommendations\n\n**Block external access at the network boundary, unless external parties require service.** \nIf global access isn't needed, filter access to the affected computer at the network boundary. Restricting access to only trusted computers and networks might greatly reduce the likelihood of exploits.\n\n**Run all software as a nonprivileged user with minimal access rights.** \nRun all non-administrative software as a non-administrative user with the least amount of privileges required to successfully operate. This will greatly reduce the potential damage that successful exploitation may achieve.\n\n**Deploy network intrusion detection systems to monitor network traffic for malicious activity.** \nDeploy NIDS to monitor network traffic for signs of anomalous or suspicious activity. This includes but is not limited to unexplained incoming and outgoing traffic. This may indicate exploit attempts or activity that results from successful exploits.\n\n**Do not follow links provided by unknown or untrusted sources.** \nNever follow links provided by unknown or untrusted sources.\n\nUpdates are available. Please see the references or vendor advisory for more information.\n", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "symantec", "title": "Microsoft Internet Explorer CVE-2019-0995 Security Bypass Vulnerability", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2019-0995"], "modified": "2019-05-14T00:00:00", "id": "SMNTC-108310", "href": "https://www.symantec.com/content/symantec/english/en/security-center/vulnerabilities/writeup.html/108310", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2019-05-14T23:21:28", "description": "### Description\n\nMicrosoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions.\n\n### Technologies Affected\n\n * Microsoft ChakraCore \n * Microsoft Edge \n\n### Recommendations\n\n**Run all software as a nonprivileged user with minimal access rights.** \nTo reduce the impact of latent vulnerabilities, always run nonadministrative software as an unprivileged user with minimal access rights.\n\n**Deploy network intrusion detection systems to monitor network traffic for malicious activity.** \nDeploy NIDS to monitor network traffic for signs of anomalous or suspicious activity. This includes but is not limited to requests that include NOP sleds and unexplained incoming and outgoing traffic. This may indicate exploit attempts or activity that results from successful exploits\n\n**Do not follow links provided by unknown or untrusted sources.** \nWeb users should be cautious about following links to sites that are provided by unfamiliar or suspicious sources. Filtering HTML from emails may help remove a possible vector for transmitting malicious links to users.\n\n**Implement multiple redundant layers of security.** \nMemory-protection schemes (such as nonexecutable stack and heap configurations and randomly mapped memory segments) will complicate exploits of memory-corruption vulnerabilities.\n\nUpdates are available. Please see the references or vendor advisory for more information.\n", "cvss3": {}, "published": "2019-05-14T00:00:00", "type": "symantec", "title": "Microsoft Edge Chakra Scripting Engine CVE-2019-0914 Remote Memory Corruption Vulnerability", "bulletinFamily": "software", "cvss2": {}, "cvelist": ["CVE-2019-0914"], "modified": "2019-05-14T00:00:00", "id": "SMNTC-108235", "href": "https://www.symantec.com/content/symantec/english/en/security-center/vulnerabilities/writeup.html/108235", "cvss": {"score": 0.0, "vector": "NONE"}}], "checkpoint_advisories": [{"lastseen": "2021-12-17T11:21:50", "description": "A memory corruption vulnerability exists in Microsoft Browser. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 7.5, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "userInteraction": "REQUIRED", "version": "3.0"}, "impactScore": 5.9}, "published": "2019-05-14T00:00:00", "type": "checkpoint_advisories", "title": "Microsoft Browser Memory Corruption (CVE-2019-0940)", "bulletinFamily": "info", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0940"], "modified": "2019-05-14T00:00:00", "id": "CPAI-2019-0588", "href": "", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-12-17T15:29:34", "description": "A memory corruption vulnerability exists in Microsoft Browser. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 7.5, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "userInteraction": "REQUIRED", "version": "3.0"}, "impactScore": 5.9}, "published": "2019-05-14T00:00:00", "type": "checkpoint_advisories", "title": "Microsoft Browser Scripting Engine Memory Corruption (CVE-2019-0911)", "bulletinFamily": "info", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0911"], "modified": "2019-05-14T00:00:00", "id": "CPAI-2019-0578", "href": "", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-12-17T11:28:52", "description": "An elevation of privilege vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.", "cvss3": {"exploitabilityScore": 2.2, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "CHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.0, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 6.0}, "published": "2019-05-14T00:00:00", "type": "checkpoint_advisories", "title": "Microsoft Edge Elevation of Privilege (CVE-2019-0938)", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0938"], "modified": "2019-05-14T00:00:00", "id": "CPAI-2019-0577", "href": "", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-12-17T11:28:52", "description": "A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 7.5, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "userInteraction": "REQUIRED", "version": "3.0"}, "impactScore": 5.9}, "published": "2019-05-14T00:00:00", "type": "checkpoint_advisories", "title": "Microsoft Edge Memory Corruption (CVE-2019-0926)", "bulletinFamily": "info", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0926"], "modified": "2019-05-14T00:00:00", "id": "CPAI-2019-0581", "href": "", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-12-17T11:28:53", "description": "A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 7.5, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "userInteraction": "REQUIRED", "version": "3.0"}, "impactScore": 5.9}, "published": "2019-05-14T00:00:00", "type": "checkpoint_advisories", "title": "Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2019-0918)", "bulletinFamily": "info", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0918"], "modified": "2019-05-14T00:00:00", "id": "CPAI-2019-0580", "href": "", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-12-17T15:29:36", "description": "An information disclosure vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information.", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "NONE", "integrityImpact": "NONE", "baseScore": 6.5, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "userInteraction": "REQUIRED", "version": "3.0"}, "impactScore": 3.6}, "published": "2019-05-14T00:00:00", "type": "checkpoint_advisories", "title": "Microsoft Internet Explorer Information Disclosure (CVE-2019-0930)", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "NONE", "integrityImpact": "NONE", "baseScore": 4.3, "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0930"], "modified": "2019-05-14T00:00:00", "id": "CPAI-2019-0586", "href": "", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:P/I:N/A:N"}}, {"lastseen": "2021-12-17T11:21:54", "description": "A memory corruption vulnerability exists in Microsoft Browser. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 7.5, "privilegesRequired": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "userInteraction": "REQUIRED", "version": "3.1"}, "impactScore": 5.9}, "published": "2019-05-14T00:00:00", "type": "checkpoint_advisories", "title": "Microsoft Browser Scripting Engine Memory Corruption (CVE-2019-0884)", "bulletinFamily": "info", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0884"], "modified": "2019-05-14T00:00:00", "id": "CPAI-2019-0579", "href": "", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}], "zdi": [{"lastseen": "2022-01-31T22:36:53", "description": "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the rendering of pattern images within HTML canvas elements. By manipulating a document's elements, an attacker can cause a pointer to be reused after it has been freed. An attacker can leverage this vulnerability to execute code in the context of the current process.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 7.5, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "userInteraction": "REQUIRED", "version": "3.0"}, "impactScore": 5.9}, "published": "2019-05-15T00:00:00", "type": "zdi", "title": "Microsoft Edge CDXImageRenderTarget Double Free Remote Code Execution Vulnerability", "bulletinFamily": "info", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0940"], "modified": "2019-05-15T00:00:00", "id": "ZDI-19-470", "href": "https://www.zerodayinitiative.com/advisories/ZDI-19-470/", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2022-01-31T22:36:52", "description": "This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of messages passed from the renderer process to the broker process of Microsoft Edge. A crafted message can trigger execution of a privileged operation. An attacker can leverage this vulnerability to escalate privileges and escape the Microsoft Edge sandbox.", "cvss3": {"exploitabilityScore": 2.2, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "CHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.0, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 6.0}, "published": "2019-05-15T00:00:00", "type": "zdi", "title": "Microsoft Edge DownloadOperation Sandbox Escape Vulnerability", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0938"], "modified": "2019-05-15T00:00:00", "id": "ZDI-19-471", "href": "https://www.zerodayinitiative.com/advisories/ZDI-19-471/", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2022-01-31T22:36:54", "description": "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of exceptions in JavaScript. By performing actions in JavaScript, an attacker can trigger a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process.", "cvss3": {"exploitabilityScore": 1.6, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 7.5, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "userInteraction": "REQUIRED", "version": "3.0"}, "impactScore": 5.9}, "published": "2019-05-15T00:00:00", "type": "zdi", "title": "Microsoft Chakra Exception Handling Type Confusion Remote Code Execution Vulnerability", "bulletinFamily": "info", "cvss2": {"severity": "HIGH", "exploitabilityScore": 4.9, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "HIGH", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.6, "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2019-0937"], "modified": "2019-05-15T00:00:00", "id": "ZDI-19-469", "href": "https://www.zerodayinitiative.com/advisories/ZDI-19-469/", "cvss": {"score": 7.6, "vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C"}}], "mskb": [{"lastseen": "2023-02-16T10:57:23", "description": "None\n## Summary\n\nThis security update resolves several reported vulnerabilities in Internet Explorer. To learn more about these vulnerabilities, see [Microsoft Common Vulnerabilities and Exposures](<https://portal.msrc.microsoft.com/en-US/security-guidance/>).Additionally, see the following articles for more information about this cumulative update:\n\n * [Windows Server 2008 SP2 update history](<https://support.microsoft.com/help/4343218>)\n * [Windows 7 SP1 and Windows Server 2008 R2 SP1 update history](<https://support.microsoft.com/help/4009469/windows-7-sp1-windows-server-2008-r2-sp1-update-history>)\n * [Windows Server 2012 update history](<https://support.microsoft.com/help/4009471/windows-server-2012-update-history>)\n * [Windows 8.1 and Windows Server 2012 R2 update history](<https://support.microsoft.com/help/4009470/windows-8-1-windows-server-2012-r2-update-history>)\n * [Windows 10 and Windows Server 2016 update history](<https://support.microsoft.com/help/4000825/windows-10-and-windows-server-2016-update-history>)\n**Important **\n\n * Except for Internet Explorer 11 on Windows Server 2012, the fixes that are included in this Security Update for Internet Explorer (KB4498206) are also included in the May 2019 Security Monthly Quality Rollup. Installing either the Security Update for Internet Explorer or the Security Monthly Quality Rollup installs the fixes that are in this update.\n * To obtain this update for Internet Explorer 11 on Server 2012, you must install this Security Update for Internet Explorer (KB4498206). This update is not included in any Security Monthly Quality Rollup or Security Only Quality Update. For Internet Explorer 10 on Windows Server 2012, other called-out installation methods are applicable.\n * If you use update management processes other than Windows Update, and you automatically approve all security updates classifications for deployment, this Security Update for Internet Explorer (KB4498206), the May 2019 Security Only Quality Update, and the May 2019 Security Monthly Quality Rollup are deployed. We recommend that you review your update deployment rules to make sure that the desired updates are deployed.\n * Except for Internet Explorer 11 on Windows Server 2012, this Security Update for Internet Explorer is not applicable for installation on a computer on which the Security Monthly Quality Rollup or the Preview of Monthly Quality Rollup from May 2019 (or a later month) is already installed. This is because those updates contain all the fixes that are in this security update for Internet Explorer.\n * If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see [Add language packs to Windows](<https://technet.microsoft.com/en-us/library/hh825699>).\n\n## How to get and install the update \n\n### Method 1: Microsoft Update\n\nThis update is available through Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see Windows Update: FAQ. **Note** For Windows RT and Windows RT 8.1, this update is available through Microsoft Update only. \n\n### Method 2: Microsoft Update Catalog\n\nTo get the standalone package for this update, go to the [Microsoft Update Catalog](<http://catalog.update.microsoft.com/v7/site/search.aspx?q=KB4498206>) website. \n\n## Known issues in this security update\n\n**Known issue**| **Mitigation** \n---|--- \nThis cumulative security update 4498206 for Internet Explorer 10 might be offered for installation through Windows Server Update Services (WSUS) or other update management solutions, even after you install [KB4492872](<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhelp%2F4492872%2Fupdate-for-internet-explorer-april-16-2019&data=01%7C01%7Cv-dgit%40microsoft.com%7Cc0cb48058a784cbf3d0208d6d415f30f%7C72f988bf86f141af91ab2d7cd011db47%7C1&sdata=pXQOXk2gNUGvQDQCy92YbT3ue1dyirohIPcFxA2MmRg%3D&reserved=0>) (Internet Explorer 11 for Windows Server 2012 and Windows Embedded 8 Standard) and upgrade to Internet Explorer 11.| Although this cumulative security update for Internet Explorer 10 might be offered for installation, this issue will not affect the functionality of Internet Explorer 11. However, you should also install KB4498206 to apply the security fixes that are resolved this month for Internet Explorer 11.**Status**Microsoft is working on a resolution and will provide an update in an upcoming release. \nAfter this security update is installed, some gov.uk websites that don\u2019t support HTTP Strict Transport Security (HSTS) may not be accessible through Internet Explorer 11 or Microsoft Edge.| **Status**This issue is resolved in KB [4505050](<https://support.microsoft.com/help/4505050>). \nInternet Explorer 11 may stop working when loading or interacting with Power BI reports that have line charts with markers. This issue may also occur when viewing other content that contains Scalable Vector Graphics (SVG) markers.| This issue is resolved in KB4508646. \n \n## Deployment information\n\nFor deployment details for this security update, see the following article in the Microsoft Knowledge Base:[Security update deployment information: May 14, 2019](<https://support.microsoft.com/en-us/help/20190514>)\n\n## Information about protection and security\n\n * Protect yourself online: [Windows Security support](<https://support.microsoft.com/hub/4099151/windows-security-help>)\n * Learn how we guard against cyber threats: [Microsoft Security](<https://www.microsoft.com/security>)\n\n## File information\n\nThe English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files. **Windows 8.1, Windows RT 8.1 and Windows Server 2012 R2**\n\n**Note: **The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.\n\n**Windows Server 2012**\n\n**Note: **The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.\n\n**Windows 7 and Windows Server 2008 R2**\n\n**Note: **The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.\n\n**Windows Server 2008**\n\n**Note: **The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.\n\n## File hash information\n\nFile name| SHA1 hash| SHA256 hash \n---|---|--- \nWindows8.1-KB4498206-arm.msu| 57C11EE06C33B01B7819D720AB6A067FF1EA5268| FDE538EB8E2FCED0AFF1008A02094A8BBF07F187150FB525F8C69DDD8A86FCE9 \nWindows8.1-KB4498206-x86.msu| 60C956A3AB115D4DBF6DBD67EBF684F1C0351FA9| 44A1EAE365534189176B87F2D7DC36595BF2734D59B7771071445155B665A57D \nWindows8.1-KB4498206-x64.msu| 714826ED9B739246E59E94367D15646CE0D11F9A| 01559A4E9E1120185670B1B75A87D233AEADD12993864926978A9398794BF32D \nWindows8-RT-KB4498206-x64.msu| 488F38351E7B07A96F9AB25BC5A25E5E20F727E4| 43B74F861D335BD9DB5DF9C8987AF85DFB47B8EAFCCBC9ED88F5F4D1880D515F \nIE11-Windows6.2-KB4498206-X64.msu| 1C9AB78D839B8C3CEE41B14A11333B58B465A037| 2B9E75840FF093CC73980182A1B9D2ABCBDF202579326D95F9055A1E56F58E43 \nIE11-Windows6.1-KB4498206-X64.msu| A3CF0BAF59BF75EADA6B77DB3ED9B207CD79900E| 4A3721E607E315438263B2D632FD880DAB7D8CE747F8992E4C09E914C020C529 \nIE11-Windows6.1-KB4498206-X86.msu| DA5C4218575A51A4DF126CA57B65048DEE58F59D| 13E9073C79B955BD3EBDBD14B721284487B6CC2A281963D04AAD72DFA14D5EB8 \nIE9-Windows6.0-KB4498206-X86.msu| D2048B1156D8A18C664D5C151055F223DCE3D1C1| 51FA4D0507018C27A80F4857DF48B7A55082F1DC50F4579A847FC23287958E50 \nIE9-Windows6.0-KB4498206-X64.msu| 268B7FAFCD4CDADBA18B02C76BD577BF50DA379B| E59589C2755E62F3E96127AEEE3F939E85560661E089FAB45F24A0B08D5EF139 \n**Internet Explorer 11**\n\n## Internet Explorer 11 on all supported ARM-based versions of Windows 8.1, Windows RT 8.1 and Windows Server 2012 R2\n\n**File name**| **File version**| **File size**| **Date**| **Time**| **Platform**| **SP requirement**| **Service branch** \n---|---|---|---|---|---|---|--- \nActxprxy.dll| 6.3.9600.19301| 1,064,960| 26-Feb-2019| 05:59| Not applicable| None| Not applicable \nHlink.dll| 6.3.9600.19101| 68,608| 19-Jul-2018| 03:30| Not applicable| None| Not applicable \nPngfilt.dll| 11.0.9600.16384| 47,616| 22-Aug-2013| 03:06| Not applicable| None| Not applicable \nUrlmon.dll| 11.0.9600.19354| 1,030,144| 23-Apr-2019| 19:33| Not applicable| None| Not applicable \nIexplore.exe| 11.0.9600.19301| 808,024| 26-Feb-2019| 07:12| Not applicable| None| Not applicable \nWininetplugin.dll| 6.3.9600.16384| 33,792| 22-Aug-2013| 02:52| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 46,592| 12-Nov-2016| 21:08| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 52,736| 12-Nov-2016| 21:08| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 51,200| 12-Nov-2016| 21:08| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 51,200| 12-Nov-2016| 21:08| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 56,320| 12-Nov-2016| 21:08| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 57,856| 12-Nov-2016| 21:09| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 49,664| 12-Nov-2016| 21:09| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 49,664| 12-Nov-2016| 18:19| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 54,272| 12-Nov-2016| 21:09| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 47,616| 12-Nov-2016| 21:09| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 49,152| 12-Nov-2016| 21:09| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 55,296| 12-Nov-2016| 21:08| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 45,056| 12-Nov-2016| 21:09| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 51,712| 12-Nov-2016| 21:09| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 51,712| 12-Nov-2016| 21:09| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 53,248| 12-Nov-2016| 21:09| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 39,424| 12-Nov-2016| 21:09| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 35,840| 12-Nov-2016| 21:09| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 50,176| 12-Nov-2016| 21:09| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 51,200| 12-Nov-2016| 21:09| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 50,688| 12-Nov-2016| 21:09| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 52,736| 12-Nov-2016| 21:10| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 53,760| 12-Nov-2016| 21:09| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 54,272| 12-Nov-2016| 21:08| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 54,272| 12-Nov-2016| 21:07| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 52,736| 12-Nov-2016| 21:08| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 51,200| 12-Nov-2016| 21:08| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 53,248| 12-Nov-2016| 21:08| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 52,736| 12-Nov-2016| 21:08| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 51,712| 23-Apr-2019| 21:28| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 50,688| 12-Nov-2016| 21:07| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 50,688| 12-Nov-2016| 21:06| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 50,176| 12-Nov-2016| 21:06| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 50,176| 12-Nov-2016| 21:06| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 31,232| 12-Nov-2016| 21:06| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 31,232| 12-Nov-2016| 21:08| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 31,232| 12-Nov-2016| 21:08| Not applicable| None| Not applicable \nHtml.iec| 2019.0.0.19301| 320,000| 26-Feb-2019| 06:35| Not applicable| None| Not applicable \nInetcpl.cpl| 11.0.9600.19326| 2,006,016| 26-Mar-2019| 03:43| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 307,200| 22-Apr-2018| 07:45| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 293,376| 22-Apr-2018| 07:45| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 289,792| 22-Apr-2018| 07:45| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 289,280| 22-Apr-2018| 07:45| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 298,496| 22-Apr-2018| 07:46| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 302,592| 22-Apr-2018| 07:52| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 281,600| 22-Apr-2018| 07:52| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 281,600| 22-Apr-2018| 07:08| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 296,960| 22-Apr-2018| 07:52| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 283,136| 22-Apr-2018| 07:53| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 291,328| 22-Apr-2018| 07:52| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 299,008| 22-Apr-2018| 07:46| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 275,456| 22-Apr-2018| 07:52| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 290,816| 22-Apr-2018| 07:52| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 292,864| 22-Apr-2018| 07:53| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 296,448| 22-Apr-2018| 07:53| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 257,536| 22-Apr-2018| 07:53| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 256,512| 22-Apr-2018| 07:53| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 288,768| 22-Apr-2018| 07:53| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 287,744| 22-Apr-2018| 07:54| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 284,672| 22-Apr-2018| 07:53| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 294,912| 22-Apr-2018| 07:53| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 296,960| 22-Apr-2018| 07:53| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 292,352| 22-Apr-2018| 07:52| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 295,424| 22-Apr-2018| 07:52| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 293,888| 22-Apr-2018| 07:51| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 293,888| 22-Apr-2018| 07:52| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 292,864| 22-Apr-2018| 07:52| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 290,816| 22-Apr-2018| 07:52| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 290,304| 23-Apr-2019| 21:29| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 286,208| 22-Apr-2018| 07:51| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 281,600| 22-Apr-2018| 07:49| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 286,208| 22-Apr-2018| 07:49| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 291,840| 22-Apr-2018| 07:49| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 242,176| 22-Apr-2018| 07:50| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 243,200| 22-Apr-2018| 07:46| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 243,200| 22-Apr-2018| 07:45| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 73,728| 16-Aug-2014| 11:19| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 67,584| 16-Aug-2014| 11:19| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 67,584| 16-Aug-2014| 11:19| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 74,240| 16-Aug-2014| 11:19| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 78,848| 16-Aug-2014| 11:19| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 61,440| 16-Aug-2014| 11:19| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 61,440| 16-Aug-2014| 01:39| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 74,752| 16-Aug-2014| 11:19| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 62,464| 16-Aug-2014| 11:19| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 68,096| 16-Aug-2014| 11:27| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 75,264| 16-Aug-2014| 11:27| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 68,608| 16-Aug-2014| 11:28| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 71,680| 16-Aug-2014| 11:27| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 73,216| 16-Aug-2014| 11:27| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 41,472| 16-Aug-2014| 11:18| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 37,888| 16-Aug-2014| 11:18| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 68,608| 16-Aug-2014| 11:18| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 67,584| 16-Aug-2014| 11:18| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 65,536| 16-Aug-2014| 11:18| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 74,240| 16-Aug-2014| 11:18| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 70,656| 16-Aug-2014| 11:18| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 71,168| 16-Aug-2014| 11:18| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 71,680| 16-Aug-2014| 11:18| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 71,168| 16-Aug-2014| 11:18| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 69,632| 16-Aug-2014| 11:27| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 68,096| 16-Aug-2014| 11:27| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 68,608| 16-Aug-2014| 11:26| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 68,096| 23-Apr-2019| 21:28| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 65,536| 16-Aug-2014| 11:27| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 59,904| 16-Aug-2014| 11:27| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 65,536| 16-Aug-2014| 11:27| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 69,120| 16-Aug-2014| 11:26| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 29,696| 16-Aug-2014| 11:27| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 30,720| 16-Aug-2014| 11:19| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 30,720| 16-Aug-2014| 11:18| Not applicable| None| Not applicable \nJavascriptcollectionagent.dll| 11.0.9600.17416| 63,488| 31-Oct-2014| 02:29| Not applicable| None| Not applicable \nDiagnosticshub.scriptedsandboxplugin.dll| 11.0.9600.17905| 215,552| 15-Jun-2015| 19:49| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 46,080| 11-Jun-2016| 20:02| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 50,176| 11-Jun-2016| 20:02| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,640| 11-Jun-2016| 20:02| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,664| 11-Jun-2016| 20:02| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 51,712| 11-Jun-2016| 20:02| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 54,272| 11-Jun-2016| 20:03| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,128| 11-Jun-2016| 20:03| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,128| 11-Jun-2016| 17:09| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 50,176| 11-Jun-2016| 20:03| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 47,616| 11-Jun-2016| 20:03| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,152| 11-Jun-2016| 20:04| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 50,688| 11-Jun-2016| 20:02| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 45,056| 11-Jun-2016| 20:03| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,152| 11-Jun-2016| 20:03| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,152| 11-Jun-2016| 20:03| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,664| 11-Jun-2016| 19:54| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 39,936| 11-Jun-2016| 19:53| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 39,424| 11-Jun-2016| 19:53| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 47,616| 11-Jun-2016| 19:53| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 47,616| 11-Jun-2016| 19:53| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,640| 11-Jun-2016| 19:53| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 51,200| 11-Jun-2016| 19:53| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 50,688| 11-Jun-2016| 19:53| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,152| 11-Jun-2016| 20:03| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 50,176| 11-Jun-2016| 20:02| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,152| 11-Jun-2016| 20:02| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,640| 11-Jun-2016| 20:02| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,664| 11-Jun-2016| 20:02| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,640| 11-Jun-2016| 20:02| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 49,664| 23-Apr-2019| 21:29| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,640| 11-Jun-2016| 20:02| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,128| 11-Jun-2016| 19:59| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,152| 11-Jun-2016| 19:58| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,128| 11-Jun-2016| 19:58| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 35,328| 11-Jun-2016| 19:58| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 35,328| 11-Jun-2016| 20:02| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 35,328| 11-Jun-2016| 20:02| Not applicable| None| Not applicable \nJsproxy.dll| 11.0.9600.17416| 39,936| 31-Oct-2014| 02:43| Not applicable| None| Not applicable \nWininet.dll| 11.0.9600.19354| 4,594,176| 23-Apr-2019| 19:33| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 114,176| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 130,560| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 124,928| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 122,880| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 130,048| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 138,240| 07-Sep-2017| 22:23| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 114,688| 07-Sep-2017| 22:23| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18698| 114,688| 14-May-2017| 19:41| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 131,584| 07-Sep-2017| 22:23| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 117,760| 07-Sep-2017| 22:23| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 122,368| 07-Sep-2017| 22:23| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 134,144| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 107,008| 07-Sep-2017| 22:23| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18838| 123,392| 14-Oct-2017| 07:14| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 127,488| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 128,512| 07-Sep-2017| 22:23| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 88,064| 07-Sep-2017| 22:23| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18838| 82,944| 14-Oct-2017| 07:14| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 125,440| 07-Sep-2017| 22:23| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 123,392| 07-Sep-2017| 22:23| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 120,320| 07-Sep-2017| 22:23| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 130,560| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 129,024| 07-Sep-2017| 22:23| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 125,952| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 129,024| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 128,000| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 123,904| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 129,024| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 123,904| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 124,416| 23-Apr-2019| 21:28| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 121,856| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 115,712| 07-Sep-2017| 22:21| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 123,904| 07-Sep-2017| 22:21| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 125,440| 07-Sep-2017| 22:22| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 74,752| 07-Sep-2017| 22:21| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 75,776| 07-Sep-2017| 22:23| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 75,776| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeui.dll| 11.0.9600.19101| 427,520| 19-Jul-2018| 03:30| Not applicable| None| Not applicable \nIedkcs32.dll| 18.0.9600.19326| 292,864| 26-Mar-2019| 03:44| Not applicable| None| Not applicable \nInstall.ins| Not applicable| 464| 23-Apr-2019| 18:24| Not applicable| None| Not applicable \nIeapfltr.dat| 10.0.9301.0| 616,104| 24-Sep-2013| 02:22| Not applicable| None| Not applicable \nIeapfltr.dll| 11.0.9600.19354| 548,352| 23-Apr-2019| 19:36| Not applicable| None| Not applicable \nIepeers.dll| 11.0.9600.19301| 107,008| 26-Feb-2019| 06:15| Not applicable| None| Not applicable \nLicmgr10.dll| 11.0.9600.17416| 23,552| 31-Oct-2014| 02:34| Not applicable| None| Not applicable \nTdc.ocx| 11.0.9600.18698| 61,952| 14-May-2017| 18:43| Not applicable| None| Not applicable \nDiagnosticshub.datawarehouse.dll| 11.0.9600.17416| 495,616| 31-Oct-2014| 02:52| Not applicable| None| Not applicable \nIedvtool.dll| 11.0.9600.19326| 726,016| 26-Mar-2019| 03:55| Not applicable| None| Not applicable \nDiagnosticshub_is.dll| 11.0.9600.17416| 38,912| 31-Oct-2014| 02:53| Not applicable| None| Not applicable \nDxtmsft.dll| 11.0.9600.18052| 368,640| 10-Sep-2015| 15:57| Not applicable| None| Not applicable \nDxtrans.dll| 11.0.9600.19301| 221,696| 26-Feb-2019| 06:14| Not applicable| None| Not applicable \nMicrosoft-windows-ie-f12-provider.ptxml| Not applicable| 11,892| 15-Aug-2014| 22:50| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:18| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:18| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:19| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:19| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:19| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:20| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 01:39| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:19| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:18| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:27| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:28| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:27| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:27| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:27| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 3,584| 16-Aug-2014| 11:18| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 3,584| 16-Aug-2014| 11:19| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:18| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:17| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:18| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:18| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:19| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:18| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:18| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:18| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:27| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:27| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:26| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 23-Apr-2019| 21:28| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:26| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:27| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:26| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:26| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 3,584| 16-Aug-2014| 11:27| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 3,584| 16-Aug-2014| 11:19| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 3,584| 16-Aug-2014| 11:18| Not applicable| None| Not applicable \nDiagnosticstap.dll| 11.0.9600.19180| 174,592| 18-Oct-2018| 03:55| Not applicable| None| Not applicable \nF12resources.dll| 11.0.9600.17496| 10,948,608| 22-Nov-2014| 01:44| Not applicable| None| Not applicable \nF12tools.dll| 11.0.9600.17905| 263,168| 15-Jun-2015| 19:51| Not applicable| None| Not applicable \nF12.dll| 11.0.9600.19326| 1,184,256| 26-Mar-2019| 03:49| Not applicable| None| Not applicable \nMsfeeds.dll| 11.0.9600.19354| 587,776| 23-Apr-2019| 19:52| Not applicable| None| Not applicable \nMsfeeds.mof| Not applicable| 1,518| 06-Feb-2014| 05:51| Not applicable| None| Not applicable \nMsfeedsbs.dll| 11.0.9600.17416| 43,008| 31-Oct-2014| 02:26| Not applicable| None| Not applicable \nMsfeedsbs.mof| Not applicable| 1,574| 21-Aug-2013| 23:43| Not applicable| None| Not applicable \nMsfeedssync.exe| 11.0.9600.16384| 11,776| 22-Aug-2013| 03:05| Not applicable| None| Not applicable \nMshtmled.dll| 11.0.9600.19301| 72,704| 26-Feb-2019| 06:16| Not applicable| None| Not applicable \nMicrosoft-windows-ie-htmlrendering.ptxml| Not applicable| 3,228| 06-Feb-2014| 05:39| Not applicable| None| Not applicable \nMshtml.dll| 11.0.9600.19354| 16,216,576| 23-Apr-2019| 19:47| Not applicable| None| Not applicable \nMshtml.tlb| 11.0.9600.16518| 2,724,864| 06-Feb-2014| 09:36| Not applicable| None| Not applicable \nIeadvpack.dll| 11.0.9600.16384| 98,816| 22-Aug-2013| 02:54| Not applicable| None| Not applicable \nIeetwcollector.exe| 11.0.9600.18658| 98,816| 05-Apr-2017| 17:29| Not applicable| None| Not applicable \nIeetwcollectorres.dll| 11.0.9600.16518| 4,096| 06-Feb-2014| 09:36| Not applicable| None| Not applicable \nIeetwproxystub.dll| 11.0.9600.16518| 43,008| 06-Feb-2014| 09:23| Not applicable| None| Not applicable \nIelowutil.exe| 11.0.9600.17031| 222,208| 22-Feb-2014| 09:32| Not applicable| None| Not applicable \nIeproxy.dll| 11.0.9600.19326| 282,112| 26-Mar-2019| 03:25| Not applicable| None| Not applicable \nIeshims.dll| 11.0.9600.18817| 265,728| 07-Sep-2017| 17:35| Not applicable| None| Not applicable \nImgutil.dll| 11.0.9600.18123| 35,328| 08-Nov-2015| 20:20| Not applicable| None| Not applicable \nBing.ico| Not applicable| 5,430| 24-Sep-2013| 02:51| Not applicable| None| Not applicable \nIeunatt.exe| 11.0.9600.16518| 112,128| 06-Feb-2014| 09:12| Not applicable| None| Not applicable \nMicrosoft-windows-ie-internetexplorer-ppdlic.xrm-ms| Not applicable| 2,956| 23-Apr-2019| 21:02| Not applicable| None| Not applicable \nWindows feed discovered.wav| Not applicable| 19,884| 24-Sep-2013| 03:25| Not applicable| None| Not applicable \nWindows information bar.wav| Not applicable| 23,308| 24-Sep-2013| 03:25| Not applicable| None| Not applicable \nWindows navigation start.wav| Not applicable| 11,340| 24-Sep-2013| 03:25| Not applicable| None| Not applicable \nWindows pop-up blocked.wav| Not applicable| 85,548| 24-Sep-2013| 03:25| Not applicable| None| Not applicable \nJsdbgui.dll| 11.0.9600.17905| 457,216| 15-Jun-2015| 19:46| Not applicable| None| Not applicable \nJsprofilerui.dll| 11.0.9600.19326| 574,976| 26-Mar-2019| 03:53| Not applicable| SPR| ARM_MICROSOFT-WINDOWS-IE-JSP \nMemoryanalyzer.dll| 11.0.9600.17905| 1,934,848| 15-Jun-2015| 20:00| Not applicable| None| Not applicable \nMshtmldac.dll| 11.0.9600.19301| 60,928| 26-Feb-2019| 06:34| Not applicable| None| Not applicable \nNetworkinspection.dll| 11.0.9600.19236| 1,105,408| 27-Dec-2018| 22:16| Not applicable| SPE| ARM_MICROSOFT-WINDOWS-IE-NETWORKINSP \nDesktop.ini| Not applicable| 65| 18-Jun-2013| 14:46| Not applicable| None| Not applicable \nOccache.dll| 11.0.9600.19301| 121,856| 26-Feb-2019| 06:13| Not applicable| None| Not applicable \nDesktop.ini| Not applicable| 65| 18-Jun-2013| 14:46| Not applicable| None| Not applicable \nWebcheck.dll| 11.0.9600.19326| 201,216| 26-Mar-2019| 03:45| Not applicable| None| Not applicable \nMsdbg2.dll| 12.0.20712.1| 295,320| 26-Jul-2013| 17:03| Not applicable| None| Not applicable \nPdm.dll| 12.0.20712.1| 420,752| 26-Jul-2013| 17:03| Not applicable| None| Not applicable \nPdmproxy100.dll| 12.0.20712.1| 76,712| 26-Jul-2013| 17:03| Not applicable| None| Not applicable \nIcrav03.rat| Not applicable| 8,798| 24-Sep-2013| 02:32| Not applicable| None| Not applicable \nMsrating.dll| 11.0.9600.17905| 157,184| 15-Jun-2015| 19:46| Not applicable| None| Not applicable \nTicrf.rat| Not applicable| 1,988| 24-Sep-2013| 02:32| Not applicable| None| Not applicable \nIertutil.dll| 11.0.9600.19354| 2,174,464| 23-Apr-2019| 20:14| Not applicable| None| Not applicable \nIe4uinit.exe| 11.0.9600.19326| 677,888| 26-Mar-2019| 03:44| Not applicable| None| Not applicable \nIernonce.dll| 11.0.9600.16518| 28,160| 06-Feb-2014| 09:15| Not applicable| None| Not applicable \nIesetup.dll| 11.0.9600.16518| 59,904| 06-Feb-2014| 09:23| Not applicable| None| Not applicable \nInseng.dll| 11.0.9600.16384| 77,312| 22-Aug-2013| 02:35| Not applicable| None| Not applicable \nIesysprep.dll| 11.0.9600.17416| 87,552| 31-Oct-2014| 02:28| Not applicable| SPR| ARM_MICROSOFT-WINDOWS-IE-SYSP \nTimeline.dll| 11.0.9600.19180| 155,136| 18-Oct-2018| 03:51| Not applicable| None| Not applicable \nTimeline.cpu.xml| Not applicable| 3,197| 24-Jul-2014| 19:09| Not applicable| None| Not applicable \nTimeline_is.dll| 11.0.9600.17416| 129,536| 31-Oct-2014| 02:43| Not applicable| None| Not applicable \nVgx.dll| 11.0.9600.19301| 734,208| 26-Feb-2019| 06:16| Not applicable| None| Not applicable \nUrl.dll| 11.0.9600.17416| 236,032| 31-Oct-2014| 02:49| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,639,936| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,694,208| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,648,640| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,636,864| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,887,232| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,963,008| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,607,168| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,606,144| 07-Sep-2017| 19:22| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,881,088| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,829,376| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,634,816| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,899,008| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,592,832| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,644,032| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,655,808| 07-Sep-2017| 22:23| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,880,576| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,743,360| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,727,488| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,865,216| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,857,024| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,625,600| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,874,944| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,666,560| 07-Sep-2017| 22:23| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,649,152| 07-Sep-2017| 22:25| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,872,384| 07-Sep-2017| 22:25| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,668,096| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,889,792| 07-Sep-2017| 22:25| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,878,528| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,852,416| 07-Sep-2017| 22:25| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.19354| 1,859,584| 23-Apr-2019| 21:29| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,633,280| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,888,256| 07-Sep-2017| 22:22| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,852,416| 07-Sep-2017| 22:21| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,897,984| 07-Sep-2017| 22:21| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,671,680| 07-Sep-2017| 22:22| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,463,808| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,463,808| 07-Sep-2017| 22:24| Not applicable| None| Not applicable \nIeframe.dll| 11.0.9600.19354| 12,166,656| 23-Apr-2019| 19:36| Not applicable| None| Not applicable \nIeframe.ptxml| Not applicable| 24,486| 06-Feb-2014| 05:38| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 517,290| 14-May-2017| 21:06| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 490,712| 14-May-2017| 21:07| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 542,963| 14-May-2017| 21:07| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 929,412| 14-May-2017| 21:18| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 449,544| 14-May-2017| 19:41| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 534,771| 14-May-2017| 21:18| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 517,434| 14-May-2017| 21:18| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 566,431| 14-May-2017| 21:07| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 561,249| 14-May-2017| 21:18| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 539,261| 14-May-2017| 21:19| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 628,531| 14-May-2017| 21:18| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 516,321| 14-May-2017| 21:18| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 479,782| 14-May-2017| 21:18| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 539,511| 14-May-2017| 21:18| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 549,499| 14-May-2017| 21:18| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 526,123| 14-May-2017| 21:18| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 532,648| 14-May-2017| 21:19| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 791,286| 14-May-2017| 21:19| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 495,363| 14-May-2017| 21:18| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 512,662| 14-May-2017| 21:15| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 412,301| 14-May-2017| 21:15| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 428,880| 14-May-2017| 21:06| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 428,880| 14-May-2017| 21:06| Not applicable| None| Not applicable \nInetres.admx| Not applicable| 1,670,497| 30-Mar-2017| 13:38| Not applicable| None| Not applicable \nInetcomm.dll| 6.3.9600.19354| 675,328| 23-Apr-2019| 19:55| Not applicable| None| Not applicable \nInetres.dll| 6.3.9600.16384| 84,480| 22-Aug-2013| 03:15| Not applicable| None| Not applicable \nJscript9.dll| 11.0.9600.19354| 3,786,752| 23-Apr-2019| 19:44| Not applicable| None| Not applicable \nJscript9diag.dll| 11.0.9600.19180| 557,568| 18-Oct-2018| 04:01| Not applicable| None| Not applicable \nJscript.dll| 5.8.9600.19354| 520,192| 23-Apr-2019| 20:13| Not applicable| None| Not applicable \nVbscript.dll| 5.8.9600.19354| 402,432| 23-Apr-2019| 20:19| Not applicable| None| Not applicable \n \n## Internet Explorer 11 on all supported x86-based versions of Windows 8.1, Windows RT 8.1\n\n**File name**| **File version**| **File size**| **Date**| **Time**| **Platform**| **SP requirement**| **Service branch** \n---|---|---|---|---|---|---|--- \nActxprxy.dll| 6.3.9600.19301| 1,049,600| 26-Feb-2019| 06:20| x86| None| Not applicable \nHlink.dll| 6.3.9600.19101| 99,328| 19-Jul-2018| 03:55| x86| None| Not applicable \nPngfilt.dll| 11.0.9600.17416| 57,344| 31-Oct-2014| 03:26| x86| None| Not applicable \nUrlmon.dll| 11.0.9600.19354| 1,323,008| 23-Apr-2019| 19:56| x86| None| Not applicable \nIexplore.exe| 11.0.9600.19036| 817,296| 25-May-2018| 05:24| x86| None| Not applicable \nWininetplugin.dll| 6.3.9600.17416| 35,328| 31-Oct-2014| 03:12| x86| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 46,592| 12-Nov-2016| 21:31| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 52,736| 12-Nov-2016| 21:30| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 51,200| 12-Nov-2016| 21:30| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 51,200| 12-Nov-2016| 21:30| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 56,320| 12-Nov-2016| 21:30| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 57,856| 12-Nov-2016| 21:32| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 49,664| 12-Nov-2016| 21:32| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 49,664| 12-Nov-2016| 19:17| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 54,272| 12-Nov-2016| 21:32| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 47,616| 12-Nov-2016| 21:32| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 49,152| 12-Nov-2016| 21:32| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 55,296| 12-Nov-2016| 21:30| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 45,056| 12-Nov-2016| 21:32| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 51,712| 12-Nov-2016| 21:32| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 51,712| 12-Nov-2016| 21:32| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 53,248| 12-Nov-2016| 21:32| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 39,424| 12-Nov-2016| 21:32| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 35,840| 12-Nov-2016| 21:32| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 50,176| 12-Nov-2016| 21:31| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 51,200| 12-Nov-2016| 21:31| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 50,688| 12-Nov-2016| 21:31| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 52,736| 12-Nov-2016| 21:31| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 53,760| 12-Nov-2016| 21:31| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 54,272| 12-Nov-2016| 20:30| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 54,272| 12-Nov-2016| 20:29| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 52,736| 12-Nov-2016| 20:30| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 51,200| 12-Nov-2016| 20:29| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 53,248| 12-Nov-2016| 20:30| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 52,736| 12-Nov-2016| 20:30| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 51,712| 23-Apr-2019| 22:42| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 50,688| 12-Nov-2016| 20:30| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 50,688| 12-Nov-2016| 20:27| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 50,176| 12-Nov-2016| 20:28| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 50,176| 12-Nov-2016| 20:28| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 31,232| 12-Nov-2016| 20:28| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 31,232| 12-Nov-2016| 21:30| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 31,232| 12-Nov-2016| 21:30| Not applicable| None| Not applicable \nHtml.iec| 2019.0.0.18895| 341,504| 02-Jan-2018| 04:51| Not applicable| None| Not applicable \nInetcpl.cpl| 11.0.9600.19326| 2,059,776| 26-Mar-2019| 04:21| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 307,200| 22-Apr-2018| 08:45| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 293,376| 22-Apr-2018| 08:45| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 289,792| 22-Apr-2018| 08:48| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 289,280| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 298,496| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 302,592| 22-Apr-2018| 08:44| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 281,600| 22-Apr-2018| 08:44| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 281,600| 22-Apr-2018| 07:49| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 296,960| 22-Apr-2018| 08:44| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 283,136| 22-Apr-2018| 08:44| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 291,328| 22-Apr-2018| 08:44| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 299,008| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 275,456| 22-Apr-2018| 08:44| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 290,816| 22-Apr-2018| 08:44| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 292,864| 22-Apr-2018| 08:44| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 296,448| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 257,536| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 256,512| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 288,768| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 287,744| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 284,672| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 294,912| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 296,960| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 292,352| 22-Apr-2018| 08:46| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 295,424| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 293,888| 22-Apr-2018| 08:46| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 293,888| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 292,864| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 290,816| 22-Apr-2018| 08:46| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 290,304| 23-Apr-2019| 22:43| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 286,208| 22-Apr-2018| 08:46| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 281,600| 22-Apr-2018| 08:39| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 286,208| 22-Apr-2018| 08:41| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 291,840| 22-Apr-2018| 08:39| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 242,176| 22-Apr-2018| 08:39| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 243,200| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 243,200| 22-Apr-2018| 08:45| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 73,728| 16-Aug-2014| 08:34| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 67,584| 16-Aug-2014| 08:33| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 67,584| 16-Aug-2014| 08:34| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 74,240| 16-Aug-2014| 08:35| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 78,848| 16-Aug-2014| 08:33| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 61,440| 16-Aug-2014| 08:34| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 61,440| 16-Aug-2014| 02:47| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 74,752| 16-Aug-2014| 08:33| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 62,464| 16-Aug-2014| 08:32| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 68,096| 16-Aug-2014| 08:27| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 75,264| 16-Aug-2014| 08:27| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 68,608| 16-Aug-2014| 08:27| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 71,680| 16-Aug-2014| 08:29| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 73,216| 16-Aug-2014| 08:27| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 41,472| 16-Aug-2014| 08:30| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 37,888| 16-Aug-2014| 08:30| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 68,608| 16-Aug-2014| 08:30| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 67,584| 16-Aug-2014| 08:30| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 65,536| 16-Aug-2014| 08:30| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 74,240| 16-Aug-2014| 08:30| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 70,656| 16-Aug-2014| 08:30| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 71,168| 16-Aug-2014| 08:30| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 71,680| 16-Aug-2014| 08:30| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 71,168| 16-Aug-2014| 08:30| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 69,632| 16-Aug-2014| 08:38| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 68,096| 16-Aug-2014| 08:38| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 68,608| 16-Aug-2014| 08:39| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 68,096| 23-Apr-2019| 22:42| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 65,536| 16-Aug-2014| 08:38| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 59,904| 16-Aug-2014| 08:38| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 65,536| 16-Aug-2014| 08:38| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 69,120| 16-Aug-2014| 08:38| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 29,696| 16-Aug-2014| 08:39| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 30,720| 16-Aug-2014| 08:34| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 30,720| 16-Aug-2014| 08:33| Not applicable| None| Not applicable \nJavascriptcollectionagent.dll| 11.0.9600.17416| 60,416| 31-Oct-2014| 02:57| x86| None| Not applicable \nDiagnosticshub.scriptedsandboxplugin.dll| 11.0.9600.17905| 230,400| 15-Jun-2015| 20:50| x86| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 46,080| 11-Jun-2016| 20:26| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 50,176| 11-Jun-2016| 20:24| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,640| 11-Jun-2016| 20:23| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,664| 11-Jun-2016| 20:24| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 51,712| 11-Jun-2016| 20:23| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 54,272| 11-Jun-2016| 19:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,128| 11-Jun-2016| 19:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,128| 11-Jun-2016| 18:10| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 50,176| 11-Jun-2016| 19:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 47,616| 11-Jun-2016| 19:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,152| 11-Jun-2016| 19:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 50,688| 11-Jun-2016| 20:24| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 45,056| 11-Jun-2016| 19:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,152| 11-Jun-2016| 19:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,152| 11-Jun-2016| 19:13| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,664| 11-Jun-2016| 19:07| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 39,936| 11-Jun-2016| 19:07| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 39,424| 11-Jun-2016| 19:07| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 47,616| 11-Jun-2016| 19:07| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 47,616| 11-Jun-2016| 19:07| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,640| 11-Jun-2016| 19:07| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 51,200| 11-Jun-2016| 19:07| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 50,688| 11-Jun-2016| 19:07| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,152| 11-Jun-2016| 19:03| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 50,176| 11-Jun-2016| 19:04| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,152| 11-Jun-2016| 19:02| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,640| 11-Jun-2016| 19:03| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,664| 11-Jun-2016| 19:03| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,640| 11-Jun-2016| 19:03| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 49,664| 23-Apr-2019| 22:43| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,640| 11-Jun-2016| 19:03| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,128| 11-Jun-2016| 19:04| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,152| 11-Jun-2016| 19:04| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,128| 11-Jun-2016| 19:05| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 35,328| 11-Jun-2016| 19:04| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 35,328| 11-Jun-2016| 20:23| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 35,328| 11-Jun-2016| 20:23| Not applicable| None| Not applicable \nJsproxy.dll| 11.0.9600.17416| 47,104| 31-Oct-2014| 03:16| x86| None| Not applicable \nWininet.dll| 11.0.9600.19354| 4,831,232| 23-Apr-2019| 20:00| x86| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 114,176| 07-Sep-2017| 21:12| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 130,560| 07-Sep-2017| 21:09| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 124,928| 07-Sep-2017| 21:10| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 122,880| 07-Sep-2017| 21:12| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 130,048| 07-Sep-2017| 21:10| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 138,240| 07-Sep-2017| 21:12| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 114,688| 07-Sep-2017| 21:12| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18666| 114,688| 16-Apr-2017| 08:51| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 131,584| 07-Sep-2017| 21:12| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 117,760| 07-Sep-2017| 21:10| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 122,368| 07-Sep-2017| 21:12| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 134,144| 07-Sep-2017| 21:12| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 107,008| 07-Sep-2017| 21:13| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18838| 123,392| 14-Oct-2017| 08:46| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 127,488| 07-Sep-2017| 21:11| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 128,512| 07-Sep-2017| 21:11| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 88,064| 07-Sep-2017| 21:07| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18838| 82,944| 14-Oct-2017| 08:47| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 125,440| 07-Sep-2017| 21:07| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 123,392| 07-Sep-2017| 21:07| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 120,320| 07-Sep-2017| 21:10| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 130,560| 07-Sep-2017| 21:07| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 129,024| 07-Sep-2017| 21:07| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 125,952| 07-Sep-2017| 22:26| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 129,024| 07-Sep-2017| 22:26| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 128,000| 07-Sep-2017| 22:25| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 123,904| 07-Sep-2017| 22:26| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 129,024| 07-Sep-2017| 22:26| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 123,904| 07-Sep-2017| 22:25| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 124,416| 23-Apr-2019| 22:43| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 121,856| 07-Sep-2017| 20:56| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 115,712| 07-Sep-2017| 21:03| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 123,904| 07-Sep-2017| 21:04| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 125,440| 07-Sep-2017| 21:04| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 74,752| 07-Sep-2017| 21:04| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 75,776| 07-Sep-2017| 21:09| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 75,776| 07-Sep-2017| 21:10| Not applicable| None| Not applicable \nIeui.dll| 11.0.9600.18895| 476,160| 02-Jan-2018| 04:44| x86| None| Not applicable \nIedkcs32.dll| 18.0.9600.19326| 333,312| 26-Mar-2019| 04:22| x86| None| Not applicable \nInstall.ins| Not applicable| 464| 23-Apr-2019| 18:23| Not applicable| None| Not applicable \nIeapfltr.dat| 10.0.9301.0| 616,104| 24-Sep-2013| 02:20| Not applicable| None| Not applicable \nIeapfltr.dll| 11.0.9600.19354| 710,144| 23-Apr-2019| 19:55| x86| None| Not applicable \nIepeers.dll| 11.0.9600.19301| 128,000| 26-Feb-2019| 06:39| x86| None| Not applicable \nLicmgr10.dll| 11.0.9600.17416| 27,136| 31-Oct-2014| 03:03| x86| None| Not applicable \nTdc.ocx| 11.0.9600.18666| 73,216| 16-Apr-2017| 07:29| x86| None| Not applicable \nDiagnosticshub.datawarehouse.dll| 11.0.9600.18895| 489,472| 02-Jan-2018| 04:55| x86| None| Not applicable \nIedvtool.dll| 11.0.9600.19326| 772,608| 26-Mar-2019| 05:12| x86| None| Not applicable \nDiagnosticshub_is.dll| 11.0.9600.17416| 37,888| 31-Oct-2014| 03:29| x86| None| Not applicable \nDxtmsft.dll| 11.0.9600.18895| 416,256| 02-Jan-2018| 04:34| x86| None| Not applicable \nDxtrans.dll| 11.0.9600.19301| 279,040| 26-Feb-2019| 06:39| x86| None| Not applicable \nMicrosoft-windows-ie-f12-provider.ptxml| Not applicable| 11,892| 15-Aug-2014| 22:51| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:34| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:35| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:36| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:33| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:34| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:33| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 02:47| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:32| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:32| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:26| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:27| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:27| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:27| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:26| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 3,584| 16-Aug-2014| 08:30| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 3,584| 16-Aug-2014| 08:30| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:29| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:29| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:30| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:30| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:30| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:30| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:31| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:30| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:37| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:37| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:38| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 23-Apr-2019| 22:42| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:37| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:39| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:37| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 08:37| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 3,584| 16-Aug-2014| 08:38| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 3,584| 16-Aug-2014| 08:32| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 3,584| 16-Aug-2014| 08:34| Not applicable| None| Not applicable \nDiagnosticstap.dll| 11.0.9600.17905| 174,592| 15-Jun-2015| 20:52| x86| None| Not applicable \nF12resources.dll| 11.0.9600.18939| 10,948,096| 10-Feb-2018| 17:17| x86| None| Not applicable \nF12tools.dll| 11.0.9600.17905| 255,488| 15-Jun-2015| 20:51| x86| None| Not applicable \nF12.dll| 11.0.9600.19326| 1,206,272| 26-Mar-2019| 04:27| x86| None| Not applicable \nMsfeeds.dll| 11.0.9600.19354| 696,320| 23-Apr-2019| 20:19| x86| None| Not applicable \nMsfeeds.mof| Not applicable| 1,518| 06-Feb-2014| 05:53| Not applicable| None| Not applicable \nMsfeedsbs.dll| 11.0.9600.17416| 52,736| 31-Oct-2014| 02:53| x86| None| Not applicable \nMsfeedsbs.mof| Not applicable| 1,574| 21-Aug-2013| 23:49| Not applicable| None| Not applicable \nMsfeedssync.exe| 11.0.9600.17416| 11,264| 31-Oct-2014| 03:25| x86| None| Not applicable \nMshta.exe| 11.0.9600.17416| 12,800| 31-Oct-2014| 03:28| x86| None| Not applicable \nMshtmled.dll| 11.0.9600.19301| 76,288| 26-Feb-2019| 06:41| x86| None| Not applicable \nMicrosoft-windows-ie-htmlrendering.ptxml| Not applicable| 3,228| 06-Feb-2014| 05:40| Not applicable| None| Not applicable \nMshtml.dll| 11.0.9600.19354| 20,279,296| 23-Apr-2019| 21:14| x86| None| Not applicable \nMshtml.tlb| 11.0.9600.16518| 2,724,864| 06-Feb-2014| 10:20| Not applicable| None| Not applicable \nIeadvpack.dll| 11.0.9600.17416| 112,128| 31-Oct-2014| 03:14| x86| None| Not applicable \nIeetwcollector.exe| 11.0.9600.18666| 104,960| 16-Apr-2017| 07:47| x86| None| Not applicable \nIeetwcollectorres.dll| 11.0.9600.16518| 4,096| 06-Feb-2014| 10:19| x86| None| Not applicable \nIeetwproxystub.dll| 11.0.9600.17416| 47,616| 31-Oct-2014| 03:23| x86| None| Not applicable \nIelowutil.exe| 11.0.9600.17416| 221,184| 31-Oct-2014| 03:15| x86| None| Not applicable \nIeproxy.dll| 11.0.9600.19267| 286,208| 25-Jan-2019| 23:03| x86| None| Not applicable \nIeshims.dll| 11.0.9600.19326| 288,256| 26-Mar-2019| 04:05| x86| None| Not applicable \nIexpress.exe| 11.0.9600.17416| 152,064| 31-Oct-2014| 03:27| x86| None| Not applicable \nWextract.exe| 11.0.9600.17416| 137,728| 31-Oct-2014| 03:28| x86| None| Not applicable \nImgutil.dll| 11.0.9600.17416| 40,448| 31-Oct-2014| 02:24| x86| None| Not applicable \nExtexport.exe| 11.0.9600.17416| 25,600| 31-Oct-2014| 03:20| x86| None| Not applicable \nBing.ico| Not applicable| 5,430| 24-Sep-2013| 02:36| Not applicable| None| Not applicable \nIeunatt.exe| 11.0.9600.17416| 115,712| 31-Oct-2014| 03:12| x86| None| Not applicable \nMicrosoft-windows-ie-internetexplorer-ppdlic.xrm-ms| Not applicable| 2,956| 23-Apr-2019| 21:51| Not applicable| None| Not applicable \nWindows feed discovered.wav| Not applicable| 19,884| 24-Sep-2013| 02:58| Not applicable| None| Not applicable \nWindows information bar.wav| Not applicable| 23,308| 24-Sep-2013| 02:58| Not applicable| None| Not applicable \nWindows navigation start.wav| Not applicable| 11,340| 24-Sep-2013| 02:58| Not applicable| None| Not applicable \nWindows pop-up blocked.wav| Not applicable| 85,548| 24-Sep-2013| 02:58| Not applicable| None| Not applicable \nJsdbgui.dll| 11.0.9600.18895| 459,776| 02-Jan-2018| 04:27| x86| None| Not applicable \nJsprofilerui.dll| 11.0.9600.18895| 579,584| 02-Jan-2018| 04:27| x86| SPR| X86_MICROSOFT-WINDOWS-IE-JSP \nMemoryanalyzer.dll| 11.0.9600.19178| 1,399,296| 12-Oct-2018| 20:16| x86| None| Not applicable \nMshtmldac.dll| 11.0.9600.18953| 64,000| 16-Feb-2018| 14:37| x86| None| Not applicable \nNetworkinspection.dll| 11.0.9600.19326| 1,075,200| 26-Mar-2019| 04:27| x86| SPE| X86_MICROSOFT-WINDOWS-IE-NETWORKINSP \nDesktop.ini| Not applicable| 65| 18-Jun-2013| 12:18| Not applicable| None| Not applicable \nOccache.dll| 11.0.9600.17416| 130,048| 31-Oct-2014| 02:48| x86| None| Not applicable \nDesktop.ini| Not applicable| 65| 18-Jun-2013| 12:19| Not applicable| None| Not applicable \nWebcheck.dll| 11.0.9600.19326| 230,400| 26-Mar-2019| 04:23| x86| None| Not applicable \nMsdbg2.dll| 12.0.41202.0| 315,008| 30-Sep-2014| 23:00| x86| None| Not applicable \nPdm.dll| 12.0.41202.0| 442,992| 30-Sep-2014| 23:00| x86| None| Not applicable \nPdmproxy100.dll| 12.0.41202.0| 99,984| 30-Sep-2014| 23:00| x86| None| Not applicable \nIcrav03.rat| Not applicable| 8,798| 24-Sep-2013| 02:25| Not applicable| None| Not applicable \nMsrating.dll| 11.0.9600.18895| 168,960| 02-Jan-2018| 04:27| x86| None| Not applicable \nTicrf.rat| Not applicable| 1,988| 24-Sep-2013| 02:26| Not applicable| None| Not applicable \nIertutil.dll| 11.0.9600.19354| 2,295,808| 23-Apr-2019| 20:52| x86| None| Not applicable \nIe4uinit.exe| 11.0.9600.19326| 692,224| 26-Mar-2019| 04:21| x86| None| Not applicable \nIernonce.dll| 11.0.9600.17416| 30,720| 31-Oct-2014| 03:15| x86| None| Not applicable \nIesetup.dll| 11.0.9600.17416| 62,464| 31-Oct-2014| 03:24| x86| None| Not applicable \nInseng.dll| 11.0.9600.17416| 91,136| 31-Oct-2014| 02:56| x86| None| Not applicable \nIesysprep.dll| 11.0.9600.17416| 90,624| 31-Oct-2014| 02:56| x86| SPR| X86_MICROSOFT-WINDOWS-IE-SYSP \nTimeline.dll| 11.0.9600.17416| 153,600| 31-Oct-2014| 02:55| x86| None| Not applicable \nTimeline.cpu.xml| Not applicable| 3,197| 24-Jul-2014| 19:11| Not applicable| None| Not applicable \nTimeline_is.dll| 11.0.9600.17416| 124,416| 31-Oct-2014| 03:15| x86| None| Not applicable \nVgx.dll| 11.0.9600.19301| 817,664| 26-Feb-2019| 06:41| x86| None| Not applicable \nUrl.dll| 11.0.9600.17416| 235,520| 31-Oct-2014| 03:24| x86| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,639,936| 07-Sep-2017| 21:14| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,694,208| 07-Sep-2017| 21:12| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,648,640| 07-Sep-2017| 21:13| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,636,864| 07-Sep-2017| 21:13| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,887,232| 07-Sep-2017| 21:13| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,963,008| 07-Sep-2017| 21:13| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,607,168| 07-Sep-2017| 21:12| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,606,144| 07-Sep-2017| 20:21| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,881,088| 07-Sep-2017| 21:13| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,829,376| 07-Sep-2017| 21:13| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,634,816| 07-Sep-2017| 21:13| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,899,008| 07-Sep-2017| 21:12| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,592,832| 07-Sep-2017| 21:13| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,644,032| 07-Sep-2017| 21:13| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,655,808| 07-Sep-2017| 21:13| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,880,576| 07-Sep-2017| 21:10| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,743,360| 07-Sep-2017| 21:11| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,727,488| 07-Sep-2017| 21:09| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,865,216| 07-Sep-2017| 21:10| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,857,024| 07-Sep-2017| 21:09| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,625,600| 07-Sep-2017| 21:09| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,874,944| 07-Sep-2017| 21:09| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,666,560| 07-Sep-2017| 21:09| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,649,152| 07-Sep-2017| 22:27| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,872,384| 07-Sep-2017| 22:27| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,668,096| 07-Sep-2017| 22:26| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,889,792| 07-Sep-2017| 22:26| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,878,528| 07-Sep-2017| 22:26| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,852,416| 07-Sep-2017| 22:26| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.19354| 1,859,584| 23-Apr-2019| 22:43| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,633,280| 07-Sep-2017| 20:56| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,888,256| 07-Sep-2017| 21:04| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,852,416| 07-Sep-2017| 21:04| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,897,984| 07-Sep-2017| 21:04| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,671,680| 07-Sep-2017| 21:04| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,463,808| 07-Sep-2017| 21:12| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,463,808| 07-Sep-2017| 21:12| Not applicable| None| Not applicable \nIeframe.dll| 11.0.9600.19354| 13,682,176| 23-Apr-2019| 20:17| x86| None| Not applicable \nIeframe.ptxml| Not applicable| 24,486| 06-Feb-2014| 05:40| Not applicable| None| Not applicable \nIeinstal.exe| 11.0.9600.18921| 475,648| 10-Feb-2018| 05:35| x86| None| Not applicable \nInetres.adml| Not applicable| 517,290| 16-Apr-2017| 09:51| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 490,712| 16-Apr-2017| 09:51| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 542,963| 16-Apr-2017| 09:50| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 929,412| 16-Apr-2017| 09:51| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 449,544| 16-Apr-2017| 08:51| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 534,771| 16-Apr-2017| 09:51| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 517,434| 16-Apr-2017| 09:51| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 566,431| 16-Apr-2017| 09:50| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 561,249| 16-Apr-2017| 09:50| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 539,261| 16-Apr-2017| 10:56| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 628,531| 16-Apr-2017| 10:56| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 516,321| 16-Apr-2017| 10:56| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 479,782| 16-Apr-2017| 10:56| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 539,511| 16-Apr-2017| 10:56| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 549,499| 16-Apr-2017| 10:56| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 526,123| 16-Apr-2017| 09:45| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 532,648| 16-Apr-2017| 09:45| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 791,286| 16-Apr-2017| 09:45| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 495,363| 16-Apr-2017| 09:45| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 512,662| 16-Apr-2017| 09:50| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 412,301| 16-Apr-2017| 09:49| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 428,880| 16-Apr-2017| 09:50| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 428,880| 16-Apr-2017| 09:50| Not applicable| None| Not applicable \nInetres.admx| Not applicable| 1,670,497| 16-Apr-2017| 04:15| Not applicable| None| Not applicable \nInetcomm.dll| 6.3.9600.19354| 880,640| 23-Apr-2019| 20:25| x86| None| Not applicable \nInetres.dll| 6.3.9600.16384| 84,480| 22-Aug-2013| 04:14| x86| None| Not applicable \nJscript9.dll| 11.0.9600.19354| 4,493,312| 23-Apr-2019| 20:23| x86| None| Not applicable \nJscript9diag.dll| 11.0.9600.19101| 620,032| 19-Jul-2018| 03:54| x86| None| Not applicable \nJscript.dll| 5.8.9600.19354| 663,040| 23-Apr-2019| 20:45| x86| None| Not applicable \nVbscript.dll| 5.8.9600.19354| 499,200| 23-Apr-2019| 20:55| x86| None| Not applicable \n \n## Internet Explorer 11 on all supported x64-based versions of Windows 8.1, Windows RT 8.1\n\n**File name**| **File version**| **File size**| **Date**| **Time**| **Platform**| **SP requirement**| **Service branch** \n---|---|---|---|---|---|---|--- \nActxprxy.dll| 6.3.9600.19301| 2,882,048| 26-Feb-2019| 06:25| x64| None| Not applicable \nHlink.dll| 6.3.9600.19101| 108,544| 19-Jul-2018| 04:22| x64| None| Not applicable \nPngfilt.dll| 11.0.9600.17416| 64,512| 31-Oct-2014| 05:09| x64| None| Not applicable \nUrlmon.dll| 11.0.9600.19354| 1,557,504| 23-Apr-2019| 20:05| x64| None| Not applicable \nIexplore.exe| 11.0.9600.19036| 817,296| 25-May-2018| 06:30| x64| None| Not applicable \nWininetplugin.dll| 6.3.9600.17416| 43,008| 31-Oct-2014| 04:51| x64| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 46,592| 12-Nov-2016| 21:35| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 52,736| 12-Nov-2016| 21:34| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 51,200| 12-Nov-2016| 21:34| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 51,200| 12-Nov-2016| 21:34| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 56,320| 12-Nov-2016| 21:34| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 57,856| 13-Nov-2016| 00:01| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 49,664| 12-Nov-2016| 23:59| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 49,664| 12-Nov-2016| 20:20| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 54,272| 13-Nov-2016| 00:00| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 47,616| 12-Nov-2016| 23:59| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 49,152| 12-Nov-2016| 23:58| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 55,296| 12-Nov-2016| 21:34| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 45,056| 13-Nov-2016| 00:02| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 51,712| 12-Nov-2016| 23:57| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 51,712| 12-Nov-2016| 23:57| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 53,248| 12-Nov-2016| 21:38| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 39,424| 12-Nov-2016| 21:39| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 35,840| 12-Nov-2016| 21:38| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 50,176| 12-Nov-2016| 21:38| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 51,200| 12-Nov-2016| 21:38| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 50,688| 12-Nov-2016| 21:39| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 52,736| 12-Nov-2016| 21:38| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 53,760| 12-Nov-2016| 21:39| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 54,272| 12-Nov-2016| 21:38| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 54,272| 12-Nov-2016| 21:39| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 52,736| 12-Nov-2016| 21:38| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 51,200| 12-Nov-2016| 21:38| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 53,248| 12-Nov-2016| 21:37| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 52,736| 12-Nov-2016| 21:37| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 51,712| 23-Apr-2019| 23:32| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 50,688| 12-Nov-2016| 21:37| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 50,688| 12-Nov-2016| 21:27| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 50,176| 12-Nov-2016| 21:27| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 50,176| 12-Nov-2016| 21:27| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 31,232| 12-Nov-2016| 21:27| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 31,232| 12-Nov-2016| 21:34| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 31,232| 12-Nov-2016| 21:34| Not applicable| None| Not applicable \nHtml.iec| 2019.0.0.19301| 417,280| 26-Feb-2019| 07:31| Not applicable| None| Not applicable \nInetcpl.cpl| 11.0.9600.19326| 2,135,552| 26-Mar-2019| 05:06| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 307,200| 22-Apr-2018| 11:12| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 293,376| 22-Apr-2018| 11:10| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 289,792| 22-Apr-2018| 11:09| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 289,280| 22-Apr-2018| 11:09| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 298,496| 22-Apr-2018| 11:09| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 302,592| 22-Apr-2018| 11:18| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 281,600| 22-Apr-2018| 11:18| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 281,600| 22-Apr-2018| 08:27| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 296,960| 22-Apr-2018| 11:18| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 283,136| 22-Apr-2018| 11:17| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 291,328| 22-Apr-2018| 11:18| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 299,008| 22-Apr-2018| 11:08| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 275,456| 22-Apr-2018| 11:14| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 290,816| 22-Apr-2018| 11:13| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 292,864| 22-Apr-2018| 11:14| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 296,448| 22-Apr-2018| 11:11| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 257,536| 22-Apr-2018| 11:11| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 256,512| 22-Apr-2018| 11:12| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 288,768| 22-Apr-2018| 11:11| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 287,744| 22-Apr-2018| 11:11| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 284,672| 22-Apr-2018| 11:10| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 294,912| 22-Apr-2018| 11:11| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 296,960| 22-Apr-2018| 11:11| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 292,352| 22-Apr-2018| 11:15| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 295,424| 22-Apr-2018| 11:10| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 293,888| 22-Apr-2018| 11:14| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 293,888| 22-Apr-2018| 11:10| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 292,864| 22-Apr-2018| 11:11| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 290,816| 22-Apr-2018| 11:10| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 290,304| 23-Apr-2019| 23:33| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 286,208| 22-Apr-2018| 11:14| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 281,600| 22-Apr-2018| 11:22| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 286,208| 22-Apr-2018| 11:22| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 291,840| 22-Apr-2018| 11:21| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 242,176| 22-Apr-2018| 11:20| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 243,200| 22-Apr-2018| 11:08| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 243,200| 22-Apr-2018| 11:09| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 73,728| 16-Aug-2014| 11:58| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 67,584| 16-Aug-2014| 11:59| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 67,584| 16-Aug-2014| 11:58| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 74,240| 16-Aug-2014| 12:00| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 78,848| 16-Aug-2014| 11:58| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 61,440| 16-Aug-2014| 11:59| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 61,440| 16-Aug-2014| 03:19| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 74,752| 16-Aug-2014| 12:00| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 62,464| 16-Aug-2014| 11:58| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 68,096| 16-Aug-2014| 12:04| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 75,264| 16-Aug-2014| 12:02| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 68,608| 16-Aug-2014| 12:01| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 71,680| 16-Aug-2014| 12:03| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 73,216| 16-Aug-2014| 12:03| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 41,472| 16-Aug-2014| 12:03| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 37,888| 16-Aug-2014| 12:03| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 68,608| 16-Aug-2014| 12:02| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 67,584| 16-Aug-2014| 12:01| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 65,536| 16-Aug-2014| 12:02| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 74,240| 16-Aug-2014| 12:03| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 70,656| 16-Aug-2014| 12:02| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 71,168| 16-Aug-2014| 12:02| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 71,680| 16-Aug-2014| 12:03| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 71,168| 16-Aug-2014| 12:02| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 69,632| 16-Aug-2014| 12:03| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 68,096| 16-Aug-2014| 12:03| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 68,608| 16-Aug-2014| 12:03| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 68,096| 23-Apr-2019| 23:33| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 65,536| 16-Aug-2014| 12:03| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 59,904| 16-Aug-2014| 12:03| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 65,536| 16-Aug-2014| 12:04| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 69,120| 16-Aug-2014| 12:03| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 29,696| 16-Aug-2014| 12:03| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 30,720| 16-Aug-2014| 11:58| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.17278| 30,720| 16-Aug-2014| 11:59| Not applicable| None| Not applicable \nJavascriptcollectionagent.dll| 11.0.9600.17416| 77,824| 31-Oct-2014| 04:30| x64| None| Not applicable \nDiagnosticshub.scriptedsandboxplugin.dll| 11.0.9600.18895| 276,480| 02-Jan-2018| 05:02| x64| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 46,080| 11-Jun-2016| 20:20| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 50,176| 11-Jun-2016| 20:20| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,640| 11-Jun-2016| 20:20| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,664| 11-Jun-2016| 20:20| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 51,712| 11-Jun-2016| 20:20| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 54,272| 11-Jun-2016| 20:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,128| 11-Jun-2016| 20:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,128| 11-Jun-2016| 19:08| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 50,176| 11-Jun-2016| 20:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 47,616| 11-Jun-2016| 20:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,152| 11-Jun-2016| 20:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 50,688| 11-Jun-2016| 20:20| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 45,056| 11-Jun-2016| 20:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,152| 11-Jun-2016| 20:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,152| 11-Jun-2016| 20:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,664| 11-Jun-2016| 20:19| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 39,936| 11-Jun-2016| 20:19| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 39,424| 11-Jun-2016| 20:19| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 47,616| 11-Jun-2016| 20:19| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 47,616| 11-Jun-2016| 20:19| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,640| 11-Jun-2016| 20:20| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 51,200| 11-Jun-2016| 20:19| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 50,688| 11-Jun-2016| 20:19| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,152| 11-Jun-2016| 20:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 50,176| 11-Jun-2016| 20:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,152| 11-Jun-2016| 20:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,640| 11-Jun-2016| 20:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,664| 11-Jun-2016| 20:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,640| 11-Jun-2016| 20:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 49,664| 23-Apr-2019| 23:32| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,640| 11-Jun-2016| 20:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,128| 11-Jun-2016| 20:14| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,152| 11-Jun-2016| 20:15| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,128| 11-Jun-2016| 20:15| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 35,328| 11-Jun-2016| 20:15| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 35,328| 11-Jun-2016| 20:20| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 35,328| 11-Jun-2016| 20:20| Not applicable| None| Not applicable \nJsproxy.dll| 11.0.9600.17416| 54,784| 31-Oct-2014| 04:57| x64| None| Not applicable \nWininet.dll| 11.0.9600.19354| 5,303,808| 23-Apr-2019| 20:16| x64| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 114,176| 08-Sep-2017| 00:18| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 130,560| 08-Sep-2017| 00:16| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 124,928| 08-Sep-2017| 00:17| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 122,880| 08-Sep-2017| 00:17| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 130,048| 08-Sep-2017| 00:17| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 138,240| 08-Sep-2017| 00:39| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 114,688| 08-Sep-2017| 00:38| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18666| 114,688| 16-Apr-2017| 09:49| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 131,584| 08-Sep-2017| 00:38| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 117,760| 08-Sep-2017| 00:39| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 122,368| 08-Sep-2017| 00:40| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 134,144| 08-Sep-2017| 00:17| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 107,008| 08-Sep-2017| 00:40| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18838| 123,392| 14-Oct-2017| 09:53| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 127,488| 08-Sep-2017| 00:36| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 128,512| 08-Sep-2017| 00:21| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 88,064| 08-Sep-2017| 00:19| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18838| 82,944| 14-Oct-2017| 09:53| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 125,440| 08-Sep-2017| 00:18| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 123,392| 08-Sep-2017| 00:18| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 120,320| 08-Sep-2017| 00:21| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 130,560| 08-Sep-2017| 00:18| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 129,024| 08-Sep-2017| 00:19| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 125,952| 07-Sep-2017| 23:17| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 129,024| 07-Sep-2017| 23:17| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 128,000| 07-Sep-2017| 23:16| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 123,904| 07-Sep-2017| 23:17| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 129,024| 07-Sep-2017| 23:18| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 123,904| 07-Sep-2017| 23:16| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 124,416| 23-Apr-2019| 23:34| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 121,856| 07-Sep-2017| 23:18| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 115,712| 07-Sep-2017| 23:13| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 123,904| 07-Sep-2017| 23:14| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 125,440| 07-Sep-2017| 23:13| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 74,752| 07-Sep-2017| 23:13| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 75,776| 08-Sep-2017| 00:16| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 75,776| 08-Sep-2017| 00:17| Not applicable| None| Not applicable \nIeui.dll| 11.0.9600.19178| 615,936| 12-Oct-2018| 02:01| x64| None| Not applicable \nIedkcs32.dll| 18.0.9600.19326| 381,440| 26-Mar-2019| 05:09| x64| None| Not applicable \nInstall.ins| Not applicable| 464| 23-Apr-2019| 18:25| Not applicable| None| Not applicable \nIeapfltr.dat| 10.0.9301.0| 616,104| 24-Sep-2013| 02:22| Not applicable| None| Not applicable \nIeapfltr.dll| 11.0.9600.19354| 800,768| 23-Apr-2019| 19:53| x64| None| Not applicable \nIepeers.dll| 11.0.9600.19301| 145,408| 26-Feb-2019| 06:56| x64| None| Not applicable \nLicmgr10.dll| 11.0.9600.17416| 33,280| 31-Oct-2014| 04:40| x64| None| Not applicable \nTdc.ocx| 11.0.9600.18666| 87,552| 16-Apr-2017| 08:10| x64| None| Not applicable \nDiagnosticshub.datawarehouse.dll| 11.0.9600.18895| 666,624| 02-Jan-2018| 05:32| x64| None| Not applicable \nIedvtool.dll| 11.0.9600.19326| 950,784| 26-Mar-2019| 06:14| x64| None| Not applicable \nDiagnosticshub_is.dll| 11.0.9600.17416| 49,664| 31-Oct-2014| 05:13| x64| None| Not applicable \nDxtmsft.dll| 11.0.9600.18895| 489,984| 02-Jan-2018| 05:06| x64| None| Not applicable \nDxtrans.dll| 11.0.9600.19301| 315,392| 26-Feb-2019| 06:56| x64| None| Not applicable \nEscmigplugin.dll| 11.0.9600.19326| 123,904| 26-Mar-2019| 05:38| x64| None| Not applicable \nEscunattend.exe| 11.0.9600.19326| 87,040| 26-Mar-2019| 05:54| x64| None| Not applicable \nMicrosoft-windows-ie-f12-provider.ptxml| Not applicable| 11,892| 15-Aug-2014| 22:51| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:59| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:59| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:59| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:59| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 12:00| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:59| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 03:19| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:59| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 11:58| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 12:04| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 12:02| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 12:01| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 12:02| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 12:02| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 3,584| 16-Aug-2014| 12:02| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 3,584| 16-Aug-2014| 12:03| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 12:01| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 12:01| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 12:03| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 12:02| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 12:02| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 12:02| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 12:04| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 12:01| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 12:04| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 12:03| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 12:03| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 23-Apr-2019| 23:32| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 12:03| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 12:03| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 12:03| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 4,096| 16-Aug-2014| 12:03| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 3,584| 16-Aug-2014| 12:03| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 3,584| 16-Aug-2014| 11:58| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.17278| 3,584| 16-Aug-2014| 11:58| Not applicable| None| Not applicable \nDiagnosticstap.dll| 11.0.9600.18895| 244,224| 02-Jan-2018| 05:04| x64| None| Not applicable \nF12resources.dll| 11.0.9600.17496| 10,949,120| 22-Nov-2014| 03:00| x64| None| Not applicable \nF12tools.dll| 11.0.9600.18895| 372,224| 02-Jan-2018| 05:03| x64| None| Not applicable \nF12.dll| 11.0.9600.19326| 1,421,312| 26-Mar-2019| 05:17| x64| None| Not applicable \nMsfeeds.dll| 11.0.9600.19354| 809,472| 23-Apr-2019| 20:30| x64| None| Not applicable \nMsfeeds.mof| Not applicable| 1,518| 06-Feb-2014| 05:54| Not applicable| None| Not applicable \nMsfeedsbs.dll| 11.0.9600.17416| 60,416| 31-Oct-2014| 04:24| x64| None| Not applicable \nMsfeedsbs.mof| Not applicable| 1,574| 22-Aug-2013| 06:54| Not applicable| None| Not applicable \nMsfeedssync.exe| 11.0.9600.17416| 12,800| 31-Oct-2014| 05:08| x64| None| Not applicable \nMshta.exe| 11.0.9600.17416| 13,824| 31-Oct-2014| 05:12| x64| None| Not applicable \nMshtmled.dll| 11.0.9600.19326| 92,160| 26-Mar-2019| 05:22| x64| None| Not applicable \nMicrosoft-windows-ie-htmlrendering.ptxml| Not applicable| 3,228| 06-Feb-2014| 05:41| Not applicable| None| Not applicable \nMshtml.dll| 11.0.9600.19354| 25,733,120| 23-Apr-2019| 21:44| x64| None| Not applicable \nMshtml.tlb| 11.0.9600.16518| 2,724,864| 06-Feb-2014| 11:30| Not applicable| None| Not applicable \nIeadvpack.dll| 11.0.9600.17416| 132,096| 31-Oct-2014| 04:54| x64| None| Not applicable \nIeetwcollector.exe| 11.0.9600.18895| 116,224| 02-Jan-2018| 05:17| x64| None| Not applicable \nIeetwcollectorres.dll| 11.0.9600.16518| 4,096| 06-Feb-2014| 11:30| x64| None| Not applicable \nIeetwproxystub.dll| 11.0.9600.18895| 48,640| 02-Jan-2018| 05:28| x64| None| Not applicable \nIelowutil.exe| 11.0.9600.17416| 222,720| 31-Oct-2014| 04:55| x64| None| Not applicable \nIeproxy.dll| 11.0.9600.19326| 744,960| 26-Mar-2019| 04:32| x64| None| Not applicable \nIeshims.dll| 11.0.9600.18123| 382,976| 08-Nov-2015| 20:36| x64| None| Not applicable \nIexpress.exe| 11.0.9600.17416| 167,424| 31-Oct-2014| 05:10| x64| None| Not applicable \nWextract.exe| 11.0.9600.17416| 143,872| 31-Oct-2014| 05:12| x64| None| Not applicable \nImgutil.dll| 11.0.9600.17416| 51,200| 31-Oct-2014| 03:42| x64| None| Not applicable \nBing.ico| Not applicable| 5,430| 24-Sep-2013| 02:51| Not applicable| None| Not applicable \nIeunatt.exe| 11.0.9600.17416| 144,384| 31-Oct-2014| 04:51| x64| None| Not applicable \nMicrosoft-windows-ie-internetexplorer-ppdlic.xrm-ms| Not applicable| 2,956| 23-Apr-2019| 22:34| Not applicable| None| Not applicable \nWindows feed discovered.wav| Not applicable| 19,884| 24-Sep-2013| 03:25| Not applicable| None| Not applicable \nWindows information bar.wav| Not applicable| 23,308| 24-Sep-2013| 03:25| Not applicable| None| Not applicable \nWindows navigation start.wav| Not applicable| 11,340| 24-Sep-2013| 03:25| Not applicable| None| Not applicable \nWindows pop-up blocked.wav| Not applicable| 85,548| 24-Sep-2013| 03:25| Not applicable| None| Not applicable \nJsdbgui.dll| 11.0.9600.19326| 591,360| 26-Mar-2019| 05:23| x64| None| Not applicable \nJsprofilerui.dll| 11.0.9600.18895| 628,736| 02-Jan-2018| 04:56| x64| SPR| AMD64_MICROSOFT-WINDOWS-IE-JSP \nMemoryanalyzer.dll| 11.0.9600.19178| 1,862,144| 12-Oct-2018| 01:58| x64| None| Not applicable \nMshtmldac.dll| 11.0.9600.19301| 88,064| 26-Feb-2019| 07:31| x64| None| Not applicable \nNetworkinspection.dll| 11.0.9600.19236| 1,217,024| 27-Dec-2018| 22:58| x64| SPE| AMD64_MICROSOFT-WINDOWS-IE-NETWORKINSP \nDesktop.ini| Not applicable| 65| 18-Jun-2013| 14:43| Not applicable| None| Not applicable \nOccache.dll| 11.0.9600.17416| 152,064| 31-Oct-2014| 04:19| x64| None| Not applicable \nDesktop.ini| Not applicable| 65| 18-Jun-2013| 14:44| Not applicable| None| Not applicable \nWebcheck.dll| 11.0.9600.19326| 262,144| 26-Mar-2019| 05:10| x64| None| Not applicable \nMsdbg2.dll| 12.0.41202.0| 403,592| 30-Sep-2014| 23:01| x64| None| Not applicable \nPdm.dll| 12.0.41202.0| 579,192| 30-Sep-2014| 23:01| x64| None| Not applicable \nPdmproxy100.dll| 12.0.41202.0| 107,152| 30-Sep-2014| 23:01| x64| None| Not applicable \nIcrav03.rat| Not applicable| 8,798| 24-Sep-2013| 02:32| Not applicable| None| Not applicable \nMsrating.dll| 11.0.9600.18895| 199,680| 02-Jan-2018| 04:56| x64| None| Not applicable \nTicrf.rat| Not applicable| 1,988| 24-Sep-2013| 02:32| Not applicable| None| Not applicable \nIertutil.dll| 11.0.9600.19354| 2,902,016| 23-Apr-2019| 21:20| x64| None| Not applicable \nIe4uinit.exe| 11.0.9600.19236| 728,064| 27-Dec-2018| 22:48| x64| None| Not applicable \nIernonce.dll| 11.0.9600.17416| 34,304| 31-Oct-2014| 04:56| x64| None| Not applicable \nIesetup.dll| 11.0.9600.17416| 66,560| 31-Oct-2014| 05:06| x64| None| Not applicable \nInseng.dll| 11.0.9600.19101| 107,520| 19-Jul-2018| 04:03| x64| None| Not applicable \nIesysprep.dll| 11.0.9600.17416| 111,616| 31-Oct-2014| 04:29| x64| SPR| AMD64_MICROSOFT-WINDOWS-IE-SYSP \nTimeline.dll| 11.0.9600.17905| 219,136| 15-Jun-2015| 22:01| x64| None| Not applicable \nTimeline.cpu.xml| Not applicable| 3,197| 24-Jul-2014| 18:58| Not applicable| None| Not applicable \nTimeline_is.dll| 11.0.9600.17416| 171,008| 31-Oct-2014| 04:56| x64| None| Not applicable \nVgx.dll| 11.0.9600.19301| 1,018,368| 26-Feb-2019| 06:58| x64| None| Not applicable \nUrl.dll| 11.0.9600.17416| 237,568| 31-Oct-2014| 05:06| x64| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,639,936| 08-Sep-2017| 00:17| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,694,208| 08-Sep-2017| 00:17| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,648,640| 08-Sep-2017| 00:17| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,636,864| 08-Sep-2017| 00:17| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,887,232| 08-Sep-2017| 00:17| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,963,008| 08-Sep-2017| 00:40| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,607,168| 08-Sep-2017| 00:39| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,606,144| 07-Sep-2017| 22:25| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,881,088| 08-Sep-2017| 00:39| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,829,376| 08-Sep-2017| 00:39| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,634,816| 08-Sep-2017| 00:39| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,899,008| 08-Sep-2017| 00:17| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,592,832| 08-Sep-2017| 00:39| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,644,032| 08-Sep-2017| 00:39| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,655,808| 08-Sep-2017| 00:39| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,880,576| 08-Sep-2017| 00:22| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,743,360| 08-Sep-2017| 00:21| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,727,488| 08-Sep-2017| 00:22| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,865,216| 08-Sep-2017| 00:19| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,857,024| 08-Sep-2017| 00:22| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,625,600| 08-Sep-2017| 00:21| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,874,944| 08-Sep-2017| 00:21| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,666,560| 08-Sep-2017| 00:21| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,649,152| 07-Sep-2017| 23:18| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,872,384| 07-Sep-2017| 23:19| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,668,096| 07-Sep-2017| 23:18| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,889,792| 07-Sep-2017| 23:19| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,878,528| 07-Sep-2017| 23:17| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,852,416| 07-Sep-2017| 23:18| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.19354| 1,859,584| 23-Apr-2019| 23:34| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,633,280| 07-Sep-2017| 23:18| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,888,256| 07-Sep-2017| 23:13| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,852,416| 07-Sep-2017| 23:14| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,897,984| 07-Sep-2017| 23:14| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,671,680| 07-Sep-2017| 23:14| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,463,808| 08-Sep-2017| 00:17| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,463,808| 08-Sep-2017| 00:18| Not applicable| None| Not applicable \nIeframe.dll| 11.0.9600.19354| 15,284,736| 23-Apr-2019| 20:30| x64| None| Not applicable \nIeframe.ptxml| Not applicable| 24,486| 06-Feb-2014| 05:41| Not applicable| None| Not applicable \nIeinstal.exe| 11.0.9600.18639| 492,032| 25-Mar-2017| 17:20| x64| None| Not applicable \nInetres.adml| Not applicable| 517,290| 16-Apr-2017| 10:54| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 490,712| 16-Apr-2017| 10:55| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 542,963| 16-Apr-2017| 10:54| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 929,412| 16-Apr-2017| 11:04| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 449,544| 16-Apr-2017| 09:49| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 534,771| 16-Apr-2017| 11:04| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 517,434| 16-Apr-2017| 11:04| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 566,431| 16-Apr-2017| 10:54| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 561,249| 16-Apr-2017| 11:04| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 539,261| 16-Apr-2017| 12:32| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 628,531| 16-Apr-2017| 12:32| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 516,321| 16-Apr-2017| 12:32| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 479,782| 16-Apr-2017| 12:32| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 539,511| 16-Apr-2017| 12:31| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 549,499| 16-Apr-2017| 12:30| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 526,123| 16-Apr-2017| 11:02| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 532,648| 16-Apr-2017| 11:02| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 791,286| 16-Apr-2017| 11:02| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 495,363| 16-Apr-2017| 11:02| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 512,662| 16-Apr-2017| 10:52| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 412,301| 16-Apr-2017| 10:52| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 428,880| 16-Apr-2017| 10:54| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 428,880| 16-Apr-2017| 10:54| Not applicable| None| Not applicable \nInetres.admx| Not applicable| 1,670,497| 24-Mar-2017| 13:35| Not applicable| None| Not applicable \nInetcomm.dll| 6.3.9600.19354| 1,033,216| 23-Apr-2019| 20:38| x64| None| Not applicable \nInetres.dll| 6.3.9600.16384| 84,480| 22-Aug-2013| 11:43| x64| None| Not applicable \nJscript9.dll| 11.0.9600.19354| 5,775,360| 23-Apr-2019| 21:09| x64| None| Not applicable \nJscript9diag.dll| 11.0.9600.19101| 814,080| 19-Jul-2018| 04:21| x64| None| Not applicable \nJscript.dll| 5.8.9600.19354| 790,528| 23-Apr-2019| 21:06| x64| None| Not applicable \nVbscript.dll| 5.8.9600.19354| 579,072| 23-Apr-2019| 21:18| x64| None| Not applicable \nIexplore.exe| 11.0.9600.19036| 817,296| 25-May-2018| 05:24| x86| None| Not applicable \nHtml.iec| 2019.0.0.18895| 341,504| 02-Jan-2018| 04:51| Not applicable| None| Not applicable \nIeui.dll| 11.0.9600.18895| 476,160| 02-Jan-2018| 04:44| x86| None| Not applicable \nIepeers.dll| 11.0.9600.19301| 128,000| 26-Feb-2019| 06:39| x86| None| Not applicable \nTdc.ocx| 11.0.9600.18666| 73,216| 16-Apr-2017| 07:29| x86| None| Not applicable \nDxtmsft.dll| 11.0.9600.18895| 416,256| 02-Jan-2018| 04:34| x86| None| Not applicable \nDxtrans.dll| 11.0.9600.19301| 279,040| 26-Feb-2019| 06:39| x86| None| Not applicable \nMsfeeds.dll| 11.0.9600.19354| 696,320| 23-Apr-2019| 20:19| x86| None| Not applicable \nMsfeeds.mof| Not applicable| 1,518| 06-Feb-2014| 05:53| Not applicable| None| Not applicable \nMshta.exe| 11.0.9600.17416| 12,800| 31-Oct-2014| 03:28| x86| None| Not applicable \nMshtmled.dll| 11.0.9600.19301| 76,288| 26-Feb-2019| 06:41| x86| None| Not applicable \nMshtml.dll| 11.0.9600.19354| 20,279,296| 23-Apr-2019| 21:14| x86| None| Not applicable \nMshtml.tlb| 11.0.9600.16518| 2,724,864| 06-Feb-2014| 10:20| Not applicable| None| Not applicable \nWow64_microsoft-windows-ie-htmlrendering.ptxml| Not applicable| 3,228| 06-Feb-2014| 05:43| Not applicable| None| Not applicable \nIeetwproxystub.dll| 11.0.9600.17416| 47,616| 31-Oct-2014| 03:23| x86| None| Not applicable \nIeunatt.exe| 11.0.9600.17416| 115,712| 31-Oct-2014| 03:12| x86| None| Not applicable \nOccache.dll| 11.0.9600.17416| 130,048| 31-Oct-2014| 02:48| x86| None| Not applicable \nWebcheck.dll| 11.0.9600.19326| 230,400| 26-Mar-2019| 04:23| x86| None| Not applicable \nIernonce.dll| 11.0.9600.17416| 30,720| 31-Oct-2014| 03:15| x86| None| Not applicable \nIesetup.dll| 11.0.9600.17416| 62,464| 31-Oct-2014| 03:24| x86| None| Not applicable \nIesysprep.dll| 11.0.9600.17416| 90,624| 31-Oct-2014| 02:56| x86| SPR| WOW64_MICROSOFT-WINDOWS-IE-SYSP \nIe9props.propdesc| Not applicable| 2,843| 24-Sep-2013| 02:34| Not applicable| None| Not applicable \nIeframe.dll| 11.0.9600.19354| 13,682,176| 23-Apr-2019| 20:17| x86| None| Not applicable \nWow64_ieframe.ptxml| Not applicable| 24,486| 06-Feb-2014| 05:43| Not applicable| None| Not applicable \nJscript9.dll| 11.0.9600.19354| 4,493,312| 23-Apr-2019| 20:23| x86| None| Not applicable \nJscript9diag.dll| 11.0.9600.19101| 620,032| 19-Jul-2018| 03:54| x86| None| Not applicable \nJscript.dll| 5.8.9600.19354| 663,040| 23-Apr-2019| 20:45| x86| None| Not applicable \nVbscript.dll| 5.8.9600.19354| 499,200| 23-Apr-2019| 20:55| x86| None| Not applicable \nActxprxy.dll| 6.3.9600.19301| 1,049,600| 26-Feb-2019| 06:20| x86| None| Not applicable \nHlink.dll| 6.3.9600.19101| 99,328| 19-Jul-2018| 03:55| x86| None| Not applicable \nPngfilt.dll| 11.0.9600.17416| 57,344| 31-Oct-2014| 03:26| x86| None| Not applicable \nUrlmon.dll| 11.0.9600.19354| 1,323,008| 23-Apr-2019| 19:56| x86| None| Not applicable \nWininetplugin.dll| 6.3.9600.17416| 35,328| 31-Oct-2014| 03:12| x86| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 46,592| 12-Nov-2016| 21:31| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 52,736| 12-Nov-2016| 21:30| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 51,200| 12-Nov-2016| 21:30| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 51,200| 12-Nov-2016| 21:30| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 56,320| 12-Nov-2016| 21:30| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 57,856| 12-Nov-2016| 21:32| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 49,664| 12-Nov-2016| 21:32| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 49,664| 12-Nov-2016| 19:17| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 54,272| 12-Nov-2016| 21:32| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 47,616| 12-Nov-2016| 21:32| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 49,152| 12-Nov-2016| 21:32| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 55,296| 12-Nov-2016| 21:30| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 45,056| 12-Nov-2016| 21:32| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 51,712| 12-Nov-2016| 21:32| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 51,712| 12-Nov-2016| 21:32| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 53,248| 12-Nov-2016| 21:32| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 39,424| 12-Nov-2016| 21:32| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 35,840| 12-Nov-2016| 21:32| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 50,176| 12-Nov-2016| 21:31| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 51,200| 12-Nov-2016| 21:31| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 50,688| 12-Nov-2016| 21:31| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 52,736| 12-Nov-2016| 21:31| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 53,760| 12-Nov-2016| 21:31| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 54,272| 12-Nov-2016| 20:30| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 54,272| 12-Nov-2016| 20:29| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 52,736| 12-Nov-2016| 20:30| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 51,200| 12-Nov-2016| 20:29| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 53,248| 12-Nov-2016| 20:30| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 52,736| 12-Nov-2016| 20:30| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 51,712| 23-Apr-2019| 22:42| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 50,688| 12-Nov-2016| 20:30| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 50,688| 12-Nov-2016| 20:27| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 50,176| 12-Nov-2016| 20:28| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 50,176| 12-Nov-2016| 20:28| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 31,232| 12-Nov-2016| 20:28| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 31,232| 12-Nov-2016| 21:30| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.18538| 31,232| 12-Nov-2016| 21:30| Not applicable| None| Not applicable \nInetcpl.cpl| 11.0.9600.19326| 2,059,776| 26-Mar-2019| 04:21| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 307,200| 22-Apr-2018| 08:45| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 293,376| 22-Apr-2018| 08:45| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 289,792| 22-Apr-2018| 08:48| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 289,280| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 298,496| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 302,592| 22-Apr-2018| 08:44| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 281,600| 22-Apr-2018| 08:44| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 281,600| 22-Apr-2018| 07:49| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 296,960| 22-Apr-2018| 08:44| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 283,136| 22-Apr-2018| 08:44| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 291,328| 22-Apr-2018| 08:44| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 299,008| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 275,456| 22-Apr-2018| 08:44| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 290,816| 22-Apr-2018| 08:44| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 292,864| 22-Apr-2018| 08:44| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 296,448| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 257,536| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 256,512| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 288,768| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 287,744| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 284,672| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 294,912| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 296,960| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 292,352| 22-Apr-2018| 08:46| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 295,424| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 293,888| 22-Apr-2018| 08:46| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 293,888| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 292,864| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 290,816| 22-Apr-2018| 08:46| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 290,304| 23-Apr-2019| 22:43| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 286,208| 22-Apr-2018| 08:46| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 281,600| 22-Apr-2018| 08:39| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 286,208| 22-Apr-2018| 08:41| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 291,840| 22-Apr-2018| 08:39| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 242,176| 22-Apr-2018| 08:39| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 243,200| 22-Apr-2018| 08:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19003| 243,200| 22-Apr-2018| 08:45| Not applicable| None| Not applicable \nJavascriptcollectionagent.dll| 11.0.9600.17416| 60,416| 31-Oct-2014| 02:57| x86| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 46,080| 11-Jun-2016| 20:26| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 50,176| 11-Jun-2016| 20:24| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,640| 11-Jun-2016| 20:23| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,664| 11-Jun-2016| 20:24| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 51,712| 11-Jun-2016| 20:23| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 54,272| 11-Jun-2016| 19:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,128| 11-Jun-2016| 19:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,128| 11-Jun-2016| 18:10| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 50,176| 11-Jun-2016| 19:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 47,616| 11-Jun-2016| 19:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,152| 11-Jun-2016| 19:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 50,688| 11-Jun-2016| 20:24| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 45,056| 11-Jun-2016| 19:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,152| 11-Jun-2016| 19:12| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,152| 11-Jun-2016| 19:13| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,664| 11-Jun-2016| 19:07| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 39,936| 11-Jun-2016| 19:07| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 39,424| 11-Jun-2016| 19:07| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 47,616| 11-Jun-2016| 19:07| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 47,616| 11-Jun-2016| 19:07| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,640| 11-Jun-2016| 19:07| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 51,200| 11-Jun-2016| 19:07| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 50,688| 11-Jun-2016| 19:07| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,152| 11-Jun-2016| 19:03| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 50,176| 11-Jun-2016| 19:04| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,152| 11-Jun-2016| 19:02| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,640| 11-Jun-2016| 19:03| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,664| 11-Jun-2016| 19:03| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,640| 11-Jun-2016| 19:03| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 49,664| 23-Apr-2019| 22:43| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,640| 11-Jun-2016| 19:03| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,128| 11-Jun-2016| 19:04| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 49,152| 11-Jun-2016| 19:04| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 48,128| 11-Jun-2016| 19:05| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 35,328| 11-Jun-2016| 19:04| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 35,328| 11-Jun-2016| 20:23| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.18378| 35,328| 11-Jun-2016| 20:23| Not applicable| None| Not applicable \nJsproxy.dll| 11.0.9600.17416| 47,104| 31-Oct-2014| 03:16| x86| None| Not applicable \nWininet.dll| 11.0.9600.19354| 4,831,232| 23-Apr-2019| 20:00| x86| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 114,176| 07-Sep-2017| 21:12| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 130,560| 07-Sep-2017| 21:09| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 124,928| 07-Sep-2017| 21:10| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 122,880| 07-Sep-2017| 21:12| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 130,048| 07-Sep-2017| 21:10| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 138,240| 07-Sep-2017| 21:12| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 114,688| 07-Sep-2017| 21:12| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18666| 114,688| 16-Apr-2017| 08:51| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 131,584| 07-Sep-2017| 21:12| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 117,760| 07-Sep-2017| 21:10| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 122,368| 07-Sep-2017| 21:12| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 134,144| 07-Sep-2017| 21:12| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 107,008| 07-Sep-2017| 21:13| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18838| 123,392| 14-Oct-2017| 08:46| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 127,488| 07-Sep-2017| 21:11| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 128,512| 07-Sep-2017| 21:11| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 88,064| 07-Sep-2017| 21:07| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18838| 82,944| 14-Oct-2017| 08:47| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 125,440| 07-Sep-2017| 21:07| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 123,392| 07-Sep-2017| 21:07| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 120,320| 07-Sep-2017| 21:10| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 130,560| 07-Sep-2017| 21:07| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 129,024| 07-Sep-2017| 21:07| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 125,952| 07-Sep-2017| 22:26| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 129,024| 07-Sep-2017| 22:26| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 128,000| 07-Sep-2017| 22:25| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 123,904| 07-Sep-2017| 22:26| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 129,024| 07-Sep-2017| 22:26| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 123,904| 07-Sep-2017| 22:25| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 124,416| 23-Apr-2019| 22:43| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 121,856| 07-Sep-2017| 20:56| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 115,712| 07-Sep-2017| 21:03| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 123,904| 07-Sep-2017| 21:04| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 125,440| 07-Sep-2017| 21:04| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 74,752| 07-Sep-2017| 21:04| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 75,776| 07-Sep-2017| 21:09| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.18817| 75,776| 07-Sep-2017| 21:10| Not applicable| None| Not applicable \nIedkcs32.dll| 18.0.9600.19326| 333,312| 26-Mar-2019| 04:22| x86| None| Not applicable \nInstall.ins| Not applicable| 464| 23-Apr-2019| 18:23| Not applicable| None| Not applicable \nIeapfltr.dat| 10.0.9301.0| 616,104| 24-Sep-2013| 02:20| Not applicable| None| Not applicable \nIeapfltr.dll| 11.0.9600.19354| 710,144| 23-Apr-2019| 19:55| x86| None| Not applicable \nLicmgr10.dll| 11.0.9600.17416| 27,136| 31-Oct-2014| 03:03| x86| None| Not applicable \nIedvtool.dll| 11.0.9600.19326| 772,608| 26-Mar-2019| 05:12| x86| None| Not applicable \nDiagnosticstap.dll| 11.0.9600.17905| 174,592| 15-Jun-2015| 20:52| x86| None| Not applicable \nF12tools.dll| 11.0.9600.17905| 255,488| 15-Jun-2015| 20:51| x86| None| Not applicable \nMsfeedsbs.dll| 11.0.9600.17416| 52,736| 31-Oct-2014| 02:53| x86| None| Not applicable \nMsfeedsbs.mof| Not applicable| 1,574| 21-Aug-2013| 23:49| Not applicable| None| Not applicable \nMsfeedssync.exe| 11.0.9600.17416| 11,264| 31-Oct-2014| 03:25| x86| None| Not applicable \nIeadvpack.dll| 11.0.9600.17416| 112,128| 31-Oct-2014| 03:14| x86| None| Not applicable \nIelowutil.exe| 11.0.9600.17416| 221,184| 31-Oct-2014| 03:15| x86| None| Not applicable \nIeproxy.dll| 11.0.9600.19267| 286,208| 25-Jan-2019| 23:03| x86| None| Not applicable \nIeshims.dll| 11.0.9600.19326| 288,256| 26-Mar-2019| 04:05| x86| None| Not applicable \nIexpress.exe| 11.0.9600.17416| 152,064| 31-Oct-2014| 03:27| x86| None| Not applicable \nWextract.exe| 11.0.9600.17416| 137,728| 31-Oct-2014| 03:28| x86| None| Not applicable \nImgutil.dll| 11.0.9600.17416| 40,448| 31-Oct-2014| 02:24| x86| None| Not applicable \nExtexport.exe| 11.0.9600.17416| 25,600| 31-Oct-2014| 03:20| x86| None| Not applicable \nJsdbgui.dll| 11.0.9600.18895| 459,776| 02-Jan-2018| 04:27| x86| None| Not applicable \nJsprofilerui.dll| 11.0.9600.18895| 579,584| 02-Jan-2018| 04:27| x86| SPR| X86_MICROSOFT-WINDOWS-IE-JSP \nMshtmldac.dll| 11.0.9600.18953| 64,000| 16-Feb-2018| 14:37| x86| None| Not applicable \nNetworkinspection.dll| 11.0.9600.19326| 1,075,200| 26-Mar-2019| 04:27| x86| SPE| X86_MICROSOFT-WINDOWS-IE-NETWORKINSP \nMsdbg2.dll| 12.0.41202.0| 315,008| 30-Sep-2014| 23:00| x86| None| Not applicable \nPdm.dll| 12.0.41202.0| 442,992| 30-Sep-2014| 23:00| x86| None| Not applicable \nPdmproxy100.dll| 12.0.41202.0| 99,984| 30-Sep-2014| 23:00| x86| None| Not applicable \nIcrav03.rat| Not applicable| 8,798| 24-Sep-2013| 02:25| Not applicable| None| Not applicable \nMsrating.dll| 11.0.9600.18895| 168,960| 02-Jan-2018| 04:27| x86| None| Not applicable \nTicrf.rat| Not applicable| 1,988| 24-Sep-2013| 02:26| Not applicable| None| Not applicable \nIertutil.dll| 11.0.9600.19354| 2,295,808| 23-Apr-2019| 20:52| x86| None| Not applicable \nInseng.dll| 11.0.9600.17416| 91,136| 31-Oct-2014| 02:56| x86| None| Not applicable \nVgx.dll| 11.0.9600.19301| 817,664| 26-Feb-2019| 06:41| x86| None| Not applicable \nUrl.dll| 11.0.9600.17416| 235,520| 31-Oct-2014| 03:24| x86| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,639,936| 07-Sep-2017| 21:14| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,694,208| 07-Sep-2017| 21:12| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,648,640| 07-Sep-2017| 21:13| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,636,864| 07-Sep-2017| 21:13| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,887,232| 07-Sep-2017| 21:13| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,963,008| 07-Sep-2017| 21:13| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,607,168| 07-Sep-2017| 21:12| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,606,144| 07-Sep-2017| 20:21| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,881,088| 07-Sep-2017| 21:13| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,829,376| 07-Sep-2017| 21:13| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,634,816| 07-Sep-2017| 21:13| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,899,008| 07-Sep-2017| 21:12| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,592,832| 07-Sep-2017| 21:13| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,644,032| 07-Sep-2017| 21:13| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,655,808| 07-Sep-2017| 21:13| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,880,576| 07-Sep-2017| 21:10| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,743,360| 07-Sep-2017| 21:11| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,727,488| 07-Sep-2017| 21:09| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,865,216| 07-Sep-2017| 21:10| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,857,024| 07-Sep-2017| 21:09| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,625,600| 07-Sep-2017| 21:09| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,874,944| 07-Sep-2017| 21:09| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,666,560| 07-Sep-2017| 21:09| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,649,152| 07-Sep-2017| 22:27| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,872,384| 07-Sep-2017| 22:27| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,668,096| 07-Sep-2017| 22:26| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,889,792| 07-Sep-2017| 22:26| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,878,528| 07-Sep-2017| 22:26| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,852,416| 07-Sep-2017| 22:26| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.19354| 1,859,584| 23-Apr-2019| 22:43| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,633,280| 07-Sep-2017| 20:56| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,888,256| 07-Sep-2017| 21:04| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,852,416| 07-Sep-2017| 21:04| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,897,984| 07-Sep-2017| 21:04| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,671,680| 07-Sep-2017| 21:04| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,463,808| 07-Sep-2017| 21:12| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.18817| 1,463,808| 07-Sep-2017| 21:12| Not applicable| None| Not applicable \nIeinstal.exe| 11.0.9600.18921| 475,648| 10-Feb-2018| 05:35| x86| None| Not applicable \nInetcomm.dll| 6.3.9600.19354| 880,640| 23-Apr-2019| 20:25| x86| None| Not applicable \nInetres.dll| 6.3.9600.16384| 84,480| 22-Aug-2013| 04:14| x86| None| Not applicable \n**Internet Explorer 11**\n\n## Internet Explorer 11 on all supported x64-based versions of Windows Server 2012\n\n**File name**| **File version**| **File size**| **Date**| **Time**| **Platform** \n---|---|---|---|---|--- \nWininet.dll.mui| 11.0.9600.19355| 46,592| 01-May-2019| 01:24| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 52,736| 01-May-2019| 01:25| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 51,200| 01-May-2019| 01:25| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 51,200| 01-May-2019| 01:26| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 56,320| 01-May-2019| 01:27| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 57,856| 01-May-2019| 01:28| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 49,664| 01-May-2019| 02:30| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 54,272| 01-May-2019| 01:28| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 47,616| 01-May-2019| 01:29| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 49,152| 01-May-2019| 01:30| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 55,296| 01-May-2019| 01:31| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 45,056| 01-May-2019| 01:32| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 51,712| 01-May-2019| 01:32| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 51,712| 01-May-2019| 01:33| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 53,248| 01-May-2019| 01:34| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 39,424| 01-May-2019| 01:35| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 35,840| 01-May-2019| 01:35| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 50,176| 01-May-2019| 01:36| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 51,200| 01-May-2019| 01:37| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 50,688| 01-May-2019| 01:37| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 52,736| 01-May-2019| 01:38| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 53,760| 01-May-2019| 01:39| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 54,272| 01-May-2019| 01:40| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 54,272| 01-May-2019| 01:41| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 52,736| 01-May-2019| 01:42| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 51,200| 01-May-2019| 01:42| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 53,248| 01-May-2019| 01:43| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 52,736| 01-May-2019| 01:44| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 51,712| 01-May-2019| 01:44| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 50,688| 01-May-2019| 01:46| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 50,688| 01-May-2019| 01:46| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 50,176| 01-May-2019| 01:47| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 50,176| 01-May-2019| 01:47| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 30,720| 01-May-2019| 01:48| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 30,720| 01-May-2019| 01:49| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 30,720| 01-May-2019| 01:49| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 307,200| 01-May-2019| 01:24| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 293,376| 01-May-2019| 01:25| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 289,792| 01-May-2019| 01:26| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 289,280| 01-May-2019| 01:26| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 298,496| 01-May-2019| 01:27| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 302,592| 01-May-2019| 01:28| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 281,600| 01-May-2019| 02:30| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 296,960| 01-May-2019| 01:29| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 283,136| 01-May-2019| 01:29| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 291,328| 01-May-2019| 01:30| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 299,008| 01-May-2019| 01:31| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 275,456| 01-May-2019| 01:32| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 290,816| 01-May-2019| 01:32| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 292,864| 01-May-2019| 01:33| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 296,448| 01-May-2019| 01:34| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 258,048| 01-May-2019| 01:35| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 256,512| 01-May-2019| 01:35| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 288,768| 01-May-2019| 01:36| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 287,744| 01-May-2019| 01:37| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 284,672| 01-May-2019| 01:37| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 294,912| 01-May-2019| 01:39| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 296,960| 01-May-2019| 01:39| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 292,352| 01-May-2019| 01:40| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 295,424| 01-May-2019| 01:41| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 293,888| 01-May-2019| 01:42| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 293,888| 01-May-2019| 01:42| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 292,864| 01-May-2019| 01:43| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 290,816| 01-May-2019| 01:44| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 288,768| 01-May-2019| 01:44| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 286,208| 01-May-2019| 01:45| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 281,088| 01-May-2019| 01:46| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 286,208| 01-May-2019| 01:47| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 291,840| 01-May-2019| 01:47| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 241,664| 01-May-2019| 01:48| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 242,688| 01-May-2019| 01:49| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 242,688| 01-May-2019| 01:50| Not applicable \nJsproxy.dll| 11.0.9600.19355| 54,784| 25-Apr-2019| 03:31| x64 \nWininet.dll| 11.0.9600.19355| 5,303,808| 25-Apr-2019| 02:35| x64 \nMicrosoft-windows-ie-htmlrendering.ptxml| Not applicable| 3,228| 25-Apr-2019| 00:41| Not applicable \nMshtml.dll| 11.0.9600.19355| 25,730,560| 25-Apr-2019| 04:01| x64 \nMshtml.tlb| 11.0.9600.19355| 2,724,864| 25-Apr-2019| 03:52| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 29,184| 01-May-2019| 01:24| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 29,696| 01-May-2019| 01:25| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 32,768| 01-May-2019| 01:25| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 33,280| 01-May-2019| 01:26| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 35,328| 01-May-2019| 01:27| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 37,888| 01-May-2019| 01:28| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 29,696| 01-May-2019| 02:30| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 34,304| 01-May-2019| 01:28| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 29,696| 01-May-2019| 01:29| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 33,280| 01-May-2019| 01:30| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 34,304| 01-May-2019| 01:31| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 27,648| 01-May-2019| 01:31| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 29,696| 01-May-2019| 01:32| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 34,304| 01-May-2019| 01:33| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 33,792| 01-May-2019| 01:34| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 23,040| 01-May-2019| 01:34| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 22,016| 01-May-2019| 01:35| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 29,696| 01-May-2019| 01:36| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 29,696| 01-May-2019| 01:37| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 31,232| 01-May-2019| 01:37| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 34,304| 01-May-2019| 01:38| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 35,840| 01-May-2019| 01:39| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 32,768| 01-May-2019| 01:40| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 33,280| 01-May-2019| 01:41| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 29,696| 01-May-2019| 01:41| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 34,816| 01-May-2019| 01:42| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 33,280| 01-May-2019| 01:43| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 32,256| 01-May-2019| 01:44| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 29,696| 01-May-2019| 01:45| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 32,768| 01-May-2019| 01:45| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 29,696| 01-May-2019| 01:46| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 30,720| 01-May-2019| 01:47| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 29,696| 01-May-2019| 01:47| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 16,384| 01-May-2019| 01:48| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 16,896| 01-May-2019| 01:49| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 16,896| 01-May-2019| 01:49| Not applicable \nJscript9.dll| 11.0.9600.19355| 5,775,360| 25-Apr-2019| 03:28| x64 \nJscript9diag.dll| 11.0.9600.19355| 814,080| 25-Apr-2019| 03:26| x64 \nJscript.dll| 5.8.9600.19355| 790,528| 25-Apr-2019| 03:26| x64 \nVbscript.dll| 5.8.9600.19356| 578,560| 30-Apr-2019| 00:51| x64 \nMshtml.dll| 11.0.9600.19355| 20,279,296| 25-Apr-2019| 03:31| x86 \nMshtml.tlb| 11.0.9600.19355| 2,724,864| 25-Apr-2019| 03:24| Not applicable \nWow64_microsoft-windows-ie-htmlrendering.ptxml| Not applicable| 3,228| 25-Apr-2019| 00:50| Not applicable \nJscript9.dll| 11.0.9600.19355| 4,493,312| 25-Apr-2019| 02:40| x86 \nJscript9diag.dll| 11.0.9600.19355| 620,032| 25-Apr-2019| 03:02| x86 \nJscript.dll| 5.8.9600.19355| 663,040| 25-Apr-2019| 03:03| x86 \nVbscript.dll| 5.8.9600.19356| 499,200| 30-Apr-2019| 00:51| x86 \nWininet.dll.mui| 11.0.9600.19355| 46,592| 01-May-2019| 00:36| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 52,736| 01-May-2019| 00:36| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 51,200| 01-May-2019| 00:37| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 51,200| 01-May-2019| 00:38| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 56,320| 01-May-2019| 00:38| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 57,856| 01-May-2019| 00:39| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 49,664| 01-May-2019| 01:55| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 54,272| 01-May-2019| 00:40| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 47,616| 01-May-2019| 00:41| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 49,152| 01-May-2019| 00:41| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 55,296| 01-May-2019| 00:42| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 45,056| 01-May-2019| 00:43| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 51,712| 01-May-2019| 00:44| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 51,712| 01-May-2019| 00:44| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 53,248| 01-May-2019| 00:45| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 39,424| 01-May-2019| 00:46| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 35,840| 01-May-2019| 00:47| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 50,176| 01-May-2019| 00:47| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 51,200| 01-May-2019| 00:49| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 50,688| 01-May-2019| 00:49| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 52,736| 01-May-2019| 00:50| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 53,760| 01-May-2019| 00:51| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 54,272| 01-May-2019| 00:52| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 54,272| 01-May-2019| 00:52| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 52,736| 01-May-2019| 00:53| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 51,200| 01-May-2019| 00:54| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 53,248| 01-May-2019| 00:55| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 52,736| 01-May-2019| 00:55| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 51,712| 01-May-2019| 00:56| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 50,688| 01-May-2019| 00:57| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 50,688| 01-May-2019| 00:58| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 50,176| 01-May-2019| 00:59| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 50,176| 01-May-2019| 00:59| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 30,720| 01-May-2019| 01:00| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 30,720| 01-May-2019| 01:01| Not applicable \nWininet.dll.mui| 11.0.9600.19355| 30,720| 01-May-2019| 01:02| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 307,200| 01-May-2019| 00:35| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 293,376| 01-May-2019| 00:36| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 289,792| 01-May-2019| 00:37| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 289,280| 01-May-2019| 00:38| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 298,496| 01-May-2019| 00:39| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 302,592| 01-May-2019| 00:39| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 281,600| 01-May-2019| 01:56| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 296,960| 01-May-2019| 00:40| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 283,136| 01-May-2019| 00:41| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 291,328| 01-May-2019| 00:41| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 299,008| 01-May-2019| 00:42| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 275,456| 01-May-2019| 00:43| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 290,816| 01-May-2019| 00:44| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 292,864| 01-May-2019| 00:44| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 296,448| 01-May-2019| 00:46| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 258,048| 01-May-2019| 00:46| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 256,512| 01-May-2019| 00:47| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 288,768| 01-May-2019| 00:48| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 287,744| 01-May-2019| 00:49| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 284,672| 01-May-2019| 00:49| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 294,912| 01-May-2019| 00:50| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 296,960| 01-May-2019| 00:51| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 292,352| 01-May-2019| 00:52| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 295,424| 01-May-2019| 00:52| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 293,888| 01-May-2019| 00:54| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 293,888| 01-May-2019| 00:54| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 292,864| 01-May-2019| 00:55| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 290,816| 01-May-2019| 00:55| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 288,768| 01-May-2019| 00:56| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 286,208| 01-May-2019| 00:57| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 281,088| 01-May-2019| 00:58| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 286,208| 01-May-2019| 00:59| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 291,840| 01-May-2019| 00:59| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 241,664| 01-May-2019| 01:00| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 242,688| 01-May-2019| 01:01| Not applicable \nMshtml.dll.mui| 11.0.9600.19355| 242,688| 01-May-2019| 01:02| Not applicable \nJsproxy.dll| 11.0.9600.19355| 47,104| 25-Apr-2019| 03:06| x86 \nWininet.dll| 11.0.9600.19355| 4,831,232| 25-Apr-2019| 02:18| x86 \nJscript9.dll.mui| 11.0.9600.19355| 29,184| 01-May-2019| 00:35| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 29,696| 01-May-2019| 00:36| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 32,768| 01-May-2019| 00:37| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 33,280| 01-May-2019| 00:38| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 35,328| 01-May-2019| 00:38| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 37,888| 01-May-2019| 00:39| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 29,696| 01-May-2019| 01:55| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 34,304| 01-May-2019| 00:40| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 29,696| 01-May-2019| 00:41| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 33,280| 01-May-2019| 00:42| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 34,304| 01-May-2019| 00:42| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 27,648| 01-May-2019| 00:43| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 29,696| 01-May-2019| 00:44| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 34,304| 01-May-2019| 00:44| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 33,792| 01-May-2019| 00:45| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 23,040| 01-May-2019| 00:46| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 22,016| 01-May-2019| 00:47| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 29,696| 01-May-2019| 00:48| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 29,696| 01-May-2019| 00:48| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 31,232| 01-May-2019| 00:49| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 34,304| 01-May-2019| 00:50| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 35,840| 01-May-2019| 00:51| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 32,768| 01-May-2019| 00:51| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 33,280| 01-May-2019| 00:52| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 29,696| 01-May-2019| 00:53| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 34,816| 01-May-2019| 00:54| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 33,280| 01-May-2019| 00:55| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 32,256| 01-May-2019| 00:55| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 29,696| 01-May-2019| 00:56| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 32,768| 01-May-2019| 00:57| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 29,696| 01-May-2019| 00:58| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 30,720| 01-May-2019| 00:58| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 29,696| 01-May-2019| 00:59| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 16,384| 01-May-2019| 01:00| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 16,896| 01-May-2019| 01:01| Not applicable \nJscript9.dll.mui| 11.0.9600.19355| 16,896| 01-May-2019| 01:02| Not applicable \n**Internet Explorer 10**\n\n## Internet Explorer 10 on all supported x64-based versions of Windows Server 2012\n\n**File name**| **File version**| **File size**| **Date**| **Time**| **Platform**| **SP requirement**| **Service branch** \n---|---|---|---|---|---|---|--- \nWindows.ui.xaml.dll| 6.2.9200.22722| 13,658,112| 26-Mar-2019| 04:09| x64| None| Not applicable \nHlink.dll| 6.2.9200.22522| 96,256| 19-Jul-2018| 05:09| x64| None| Not applicable \nUrlmon.dll| 10.0.9200.22750| 1,395,200| 23-Apr-2019| 21:55| x64| None| Not applicable \nIexplore.exe| 10.0.9200.22387| 775,816| 20-Feb-2018| 20:17| x64| None| Not applicable \nHtml.iec| 2019.0.0.22387| 441,856| 20-Feb-2018| 17:49| Not applicable| None| Not applicable \nInetcpl.cpl| 10.0.9200.22722| 1,509,376| 26-Mar-2019| 04:09| Not applicable| None| Not applicable \nJsproxy.dll| 10.0.9200.22387| 53,248| 20-Feb-2018| 19:46| x64| None| Not applicable \nWininet.dll| 10.0.9200.22750| 2,251,264| 23-Apr-2019| 21:55| x64| None| Not applicable \nIdctrls.dll| 6.2.9200.22671| 75,776| 24-Jan-2019| 05:13| x64| None| Not applicable \nIedkcs32.dll| 18.0.9200.22695| 255,488| 12-Feb-2019| 17:29| x64| None| Not applicable \nInstall.ins| Not applicable| 464| 23-Apr-2019| 18:07| Not applicable| None| Not applicable \nIe9props.propdesc| Not applicable| 2,843| 15-Nov-2017| 00:49| Not applicable| None| Not applicable \nIeapfltr.dat| 10.0.8411.0| 1,400,416| 21-Nov-2017| 07:23| Not applicable| None| Not applicable \nIeapfltr.dll| 10.0.9200.22750| 762,368| 23-Apr-2019| 21:55| x64| None| Not applicable \nTdc.ocx| 10.0.9200.22387| 77,312| 20-Feb-2018| 19:47| x64| None| Not applicable \nDxtmsft.dll| 10.0.9200.22387| 452,608| 20-Feb-2018| 19:46| x64| None| Not applicable \nDxtrans.dll| 10.0.9200.22722| 281,088| 26-Mar-2019| 04:09| x64| None| Not applicable \nMsfeeds.dll| 10.0.9200.22750| 603,648| 23-Apr-2019| 21:55| x64| None| Not applicable \nMsfeeds.mof| Not applicable| 1,518| 20-Feb-2018| 16:02| Not applicable| None| Not applicable \nMshtmled.dll| 10.0.9200.22695| 96,768| 12-Feb-2019| 17:29| x64| None| Not applicable \nMicrosoft-windows-ie-htmlrendering.ptxml| Not applicable| 3,228| 20-Feb-2018| 15:58| Not applicable| None| Not applicable \nMshtml.dll| 10.0.9200.22750| 20,148,224| 23-Apr-2019| 21:55| x64| None| Not applicable \nMshtml.tlb| 10.0.9200.22387| 2,706,432| 20-Feb-2018| 18:00| Not applicable| None| Not applicable \nIelowutil.exe| 10.0.9200.22387| 223,744| 20-Feb-2018| 19:47| x64| None| Not applicable \nIeproxy.dll| 10.0.9200.22671| 704,000| 24-Jan-2019| 05:13| x64| None| Not applicable \nIeshims.dll| 10.0.9200.22387| 365,568| 20-Feb-2018| 19:46| x64| None| Not applicable \nIcrav03.rat| Not applicable| 8,798| 15-Nov-2017| 00:49| Not applicable| None| Not applicable \nMsrating.dll| 10.0.9200.22387| 197,120| 20-Feb-2018| 19:46| x64| None| Not applicable \nTicrf.rat| Not applicable| 1,988| 15-Nov-2017| 00:49| Not applicable| None| Not applicable \nIertutil.dll| 10.0.9200.22750| 2,689,536| 23-Apr-2019| 21:55| x64| None| Not applicable \nIe4uinit.exe| 10.0.9200.22387| 51,712| 20-Feb-2018| 19:47| x64| None| Not applicable \nIernonce.dll| 10.0.9200.22387| 39,936| 20-Feb-2018| 19:46| x64| None| Not applicable \nIesetup.dll| 10.0.9200.22387| 67,072| 20-Feb-2018| 19:46| x64| None| Not applicable \nIesysprep.dll| 10.0.9200.22387| 136,704| 20-Feb-2018| 19:46| x64| SPR| AMD64_MICROSOFT-WINDOWS-IE-SYSP \nVgx.dll| 10.0.9200.22695| 1,085,440| 12-Feb-2019| 17:29| x64| None| Not applicable \nIeframe.dll| 10.0.9200.22750| 15,444,480| 23-Apr-2019| 21:55| x64| None| Not applicable \nIeframe.ptxml| Not applicable| 25,923| 20-Feb-2018| 15:58| Not applicable| None| Not applicable \nIeinstal.exe| 10.0.9200.22750| 493,568| 23-Apr-2019| 21:55| x64| None| Not applicable \nInetres.adml| Not applicable| 496,073| 12-Jun-2018| 20:12| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 471,216| 12-Jun-2018| 20:02| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 521,514| 12-Jun-2018| 18:01| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 891,899| 12-Jun-2018| 17:55| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 431,913| 20-Feb-2018| 19:52| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 513,874| 12-Jun-2018| 20:21| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 499,586| 12-Jun-2018| 19:32| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 544,437| 12-Jun-2018| 19:56| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 539,484| 12-Jun-2018| 19:53| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 518,202| 12-Jun-2018| 19:57| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 603,821| 12-Jun-2018| 17:56| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 499,713| 12-Jun-2018| 20:19| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 460,208| 12-Jun-2018| 18:00| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 519,382| 12-Jun-2018| 17:56| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 527,261| 12-Jun-2018| 17:57| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 505,383| 12-Jun-2018| 17:58| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 511,915| 12-Jun-2018| 18:10| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 761,065| 12-Jun-2018| 18:08| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 481,848| 12-Jun-2018| 17:54| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 492,315| 12-Jun-2018| 17:55| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 395,563| 12-Jun-2018| 18:08| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 411,744| 12-Jun-2018| 18:00| Not applicable| None| Not applicable \nInetres.adml| Not applicable| 411,744| 12-Jun-2018| 17:58| Not applicable| None| Not applicable \nInetres.admx| Not applicable| 1,649,803| 15-Nov-2017| 00:52| Not applicable| None| Not applicable \nJsdebuggeride.dll| 10.0.9200.22387| 148,992| 20-Feb-2018| 19:46| x64| None| Not applicable \nPurchasewindowslicense.dll| 6.2.9200.22750| 562,688| 23-Apr-2019| 21:55| x64| None| Not applicable \nPurchasewindowslicense.exe| 6.2.9200.22671| 22,136| 24-Jan-2019| 05:45| x64| None| Not applicable \nInetcomm.dll| 6.2.9200.22750| 949,760| 23-Apr-2019| 21:55| x64| None| Not applicable \nInetres.dll| 6.2.9200.22387| 84,480| 20-Feb-2018| 17:59| x64| None| Not applicable \nFirstlogonanim.html| Not applicable| 88,435| 06-Jul-2012| 19:56| Not applicable| None| Not applicable \nMsoobefirstlogonanim.dll| 6.2.9200.22671| 47,104| 24-Jan-2019| 05:13| x64| None| Not applicable \nPhotoviewer.dll| 6.2.9200.22671| 1,820,672| 24-Jan-2019| 05:13| x64| None| Not applicable \nJscript9.dll| 10.0.9200.22750| 3,869,184| 23-Apr-2019| 21:55| x64| None| Not applicable \nJscript.dll| 5.8.9200.22750| 859,648| 23-Apr-2019| 21:55| x64| None| Not applicable \nVbscript.dll| 5.8.9200.22750| 595,456| 23-Apr-2019| 21:55| x64| None| Not applicable \nAuthbroker.dll| 6.2.9200.22671| 96,256| 24-Jan-2019| 05:13| x64| None| Not applicable \nAuthhost.exe| 6.2.9200.22750| 122,296| 23-Apr-2019| 22:15| x64| None| Not applicable \nAuthhostproxy.dll| 6.2.9200.16384| 12,288| 26-Jul-2012| 03:05| x64| None| Not applicable \nResources.pri| Not applicable| 8,544| 25-Jul-2012| 23:04| Not applicable| None| Not applicable \nWindows store.lnk| Not applicable| 2,028| 25-Jul-2012| 20:13| Not applicable| None| Not applicable \nWinstore.ui.winmd| Not applicable| 14,336| 03-Jul-2013| 05:05| Not applicable| None| Not applicable \nWinstoreui-ppdlic.xrm-ms| Not applicable| 2,885| 23-Apr-2019| 22:10| Not applicable| None| Not applicable \nWinstoreui.dll| 6.2.9200.22750| 825,344| 23-Apr-2019| 21:55| x64| None| Not applicable \nWindows.applicationmodel.store.dll| 6.2.9200.22671| 198,656| 24-Jan-2019| 05:13| x64| None| Not applicable \nWindows.applicationmodel.store.testingframework.dll| 6.2.9200.22750| 163,840| 23-Apr-2019| 21:55| x64| None| Not applicable \nWsshared.dll| 6.2.9200.22750| 695,808| 23-Apr-2019| 21:55| x64| None| Not applicable \nUxinit.dll| 6.2.9200.22387| 53,760| 20-Feb-2018| 19:46| x64| None| Not applicable \nUxtheme.dll| 6.2.9200.22387| 909,312| 20-Feb-2018| 19:46| x64| None| Not applicable \nWwaapi.dll| 6.2.9200.22695| 116,224| 12-Feb-2019| 17:30| x64| None| Not applicable \nWindowswebapphost.ptxml| Not applicable| 2,055| 20-Sep-2012| 01:44| Not applicable| None| Not applicable \nWwahost.exe| 6.2.9200.22750| 423,424| 23-Apr-2019| 21:55| x64| None| Not applicable \nWindowslivelogin.dll| 6.2.9200.22671| 305,152| 24-Jan-2019| 05:13| x64| None| Not applicable \nIexplore.exe| 10.0.9200.22387| 770,696| 20-Feb-2018| 19:06| x86| None| Not applicable \nHtml.iec| 2019.0.0.22387| 361,984| 20-Feb-2018| 17:24| Not applicable| None| Not applicable \nTdc.ocx| 10.0.9200.22387| 61,952| 20-Feb-2018| 18:51| x86| None| Not applicable \nDxtmsft.dll| 10.0.9200.22387| 359,936| 20-Feb-2018| 18:51| x86| None| Not applicable \nDxtrans.dll| 10.0.9200.22695| 228,352| 12-Feb-2019| 04:16| x86| None| Not applicable \nMsfeeds.dll| 10.0.9200.22750| 493,568| 23-Apr-2019| 20:59| x86| None| Not applicable \nMsfeeds.mof| Not applicable| 1,518| 20-Feb-2018| 16:01| Not applicable| None| Not applicable \nMshtmled.dll| 10.0.9200.22695| 80,384| 12-Feb-2019| 04:16| x86| None| Not applicable \nMshtml.dll| 10.0.9200.22750| 14,723,584| 23-Apr-2019| 20:59| x86| None| Not applicable \nMshtml.tlb| 10.0.9200.22387| 2,706,432| 20-Feb-2018| 17:33| Not applicable| None| Not applicable \nWow64_microsoft-windows-ie-htmlrendering.ptxml| Not applicable| 3,228| 20-Feb-2018| 16:00| Not applicable| None| Not applicable \nIernonce.dll| 10.0.9200.22387| 33,280| 20-Feb-2018| 18:51| x86| None| Not applicable \nIesetup.dll| 10.0.9200.22387| 61,440| 20-Feb-2018| 18:51| x86| None| Not applicable \nIe9props.propdesc| Not applicable| 2,843| 15-Nov-2017| 00:49| Not applicable| None| Not applicable \nIeframe.dll| 10.0.9200.22750| 13,784,064| 23-Apr-2019| 20:59| x86| None| Not applicable \nWow64_ieframe.ptxml| Not applicable| 25,923| 20-Feb-2018| 16:00| Not applicable| None| Not applicable \nJscript9.dll| 10.0.9200.22750| 2,757,120| 23-Apr-2019| 20:59| x86| None| Not applicable \nJscript.dll| 5.8.9200.22750| 712,704| 23-Apr-2019| 20:59| x86| None| Not applicable \nVbscript.dll| 5.8.9200.22750| 516,096| 23-Apr-2019| 20:59| x86| None| Not applicable \nAuthbroker.dll| 6.2.9200.22671| 74,752| 24-Jan-2019| 04:33| x86| None| Not applicable \nUxtheme.dll| 6.2.9200.22387| 534,528| 20-Feb-2018| 16:52| x86| None| Not applicable \nWwaapi.dll| 6.2.9200.22695| 75,264| 12-Feb-2019| 04:16| x86| None| Not applicable \nWow64_windowswebapphost.ptxml| Not applicable| 2,055| 20-Sep-2012| 01:45| Not applicable| None| Not applicable \nWwahost.exe| 6.2.9200.22750| 334,848| 23-Apr-2019| 20:59| x86| None| Not applicable \nWindowslivelogin.dll| 6.2.9200.22671| 233,472| 24-Jan-2019| 04:34| x86| None| Not applicable \nWindows.ui.xaml.dll| 6.2.9200.22671| 10,803,200| 24-Jan-2019| 04:34| x86| None| Not applicable \nHlink.dll| 6.2.9200.22522| 75,264| 19-Jul-2018| 17:49| x86| None| Not applicable \nUrlmon.dll| 10.0.9200.22750| 1,169,920| 23-Apr-2019| 20:59| x86| None| Not applicable \nInetcpl.cpl| 10.0.9200.22722| 1,441,280| 26-Mar-2019| 03:14| Not applicable| None| Not applicable \nJsproxy.dll| 10.0.9200.22387| 38,400| 20-Feb-2018| 18:51| x86| None| Not applicable \nWininet.dll| 10.0.9200.22750| 1,771,008| 23-Apr-2019| 20:59| x86| None| Not applicable \nIdctrls.dll| 6.2.9200.22671| 63,488| 24-Jan-2019| 04:33| x86| None| Not applicable \nIedkcs32.dll| 18.0.9200.22695| 226,816| 12-Feb-2019| 04:16| x86| None| Not applicable \nInstall.ins| Not applicable| 464| 23-Apr-2019| 18:07| Not applicable| None| Not applicable \nIeapfltr.dat| 10.0.8411.0| 1,400,416| 21-Nov-2017| 07:23| Not applicable| None| Not applicable \nIeapfltr.dll| 10.0.9200.22750| 629,248| 23-Apr-2019| 20:59| x86| None| Not applicable \nIelowutil.exe| 10.0.9200.22671| 222,208| 24-Jan-2019| 04:34| x86| None| Not applicable \nIeproxy.dll| 10.0.9200.22671| 258,048| 24-Jan-2019| 04:33| x86| None| Not applicable \nIeshims.dll| 10.0.9200.22387| 245,248| 20-Feb-2018| 18:51| x86| None| Not applicable \nIcrav03.rat| Not applicable| 8,798| 15-Nov-2017| 00:49| Not applicable| None| Not applicable \nMsrating.dll| 10.0.9200.22387| 163,840| 20-Feb-2018| 18:51| x86| None| Not applicable \nTicrf.rat| Not applicable| 1,988| 15-Nov-2017| 00:49| Not applicable| None| Not applicable \nIertutil.dll| 10.0.9200.22750| 2,090,496| 23-Apr-2019| 20:59| x86| None| Not applicable \nIesysprep.dll| 10.0.9200.22387| 109,056| 20-Feb-2018| 18:51| x86| SPR| X86_MICROSOFT-WINDOWS-IE-SYSP \nVgx.dll| 10.0.9200.22695| 818,688| 12-Feb-2019| 04:16| x86| None| Not applicable \nIeinstal.exe| 10.0.9200.22750| 478,720| 23-Apr-2019| 20:59| x86| None| Not applicable \nJsdebuggeride.dll| 10.0.9200.22387| 108,032| 20-Feb-2018| 18:51| x86| None| Not applicable \nInetcomm.dll| 6.2.9200.22750| 737,280| 23-Apr-2019| 20:59| x86| None| Not applicable \nInetres.dll| 6.2.9200.22387| 84,480| 20-Feb-2018| 17:32| x86| None| Not applicable \nPhotoviewer.dll| 6.2.9200.22671| 1,637,376| 24-Jan-2019| 04:34| x86| None| Not applicable \nWindows.applicationmodel.store.dll| 6.2.9200.22671| 143,872| 24-Jan-2019| 04:34| x86| None| Not applicable \nWindows.applicationmodel.store.testingframework.dll| 6.2.9200.22750| 124,928| 23-Apr-2019| 20:59| x86| None| Not applicable \nWsshared.dll| 6.2.9200.22750| 568,832| 23-Apr-2019| 20:59| x86| None| Not applicable \nUxinit.dll| 6.2.9200.22387| 44,032| 20-Feb-2018| 18:51| x86| None| Not applicable \n**Internet Explorer 11**\n\n## Internet Explorer 11 on all supported x64-based versions of Windows 7 and Windows Server 2008 R2\n\n**File name**| **File version**| **File size**| **Date**| **Time**| **Platform**| **SP requirement**| **Service branch** \n---|---|---|---|---|---|---|--- \nUrlmon.dll| 11.0.9600.19354| 1,557,504| 23-Apr-2019| 20:05| x64| None| Not applicable \nIexplore.exe| 11.0.9600.19354| 817,248| 25-Apr-2019| 19:28| x64| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 31,744| 25-Apr-2019| 19:30| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 36,352| 25-Apr-2019| 19:30| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 35,328| 25-Apr-2019| 19:30| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 34,816| 25-Apr-2019| 19:32| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 36,864| 25-Apr-2019| 19:32| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 39,424| 25-Apr-2019| 19:33| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 32,768| 25-Apr-2019| 20:52| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 37,376| 25-Apr-2019| 19:33| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 33,280| 25-Apr-2019| 19:34| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 34,816| 25-Apr-2019| 19:35| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 38,400| 25-Apr-2019| 19:36| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 30,720| 25-Apr-2019| 19:36| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 34,816| 25-Apr-2019| 19:37| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 35,328| 25-Apr-2019| 19:38| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 36,864| 25-Apr-2019| 19:39| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 25,600| 25-Apr-2019| 19:39| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 24,576| 25-Apr-2019| 19:40| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 35,840| 25-Apr-2019| 19:41| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 34,304| 25-Apr-2019| 19:41| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 34,304| 25-Apr-2019| 19:42| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 36,352| 25-Apr-2019| 19:43| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 35,840| 25-Apr-2019| 19:44| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 34,816| 25-Apr-2019| 19:44| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 35,840| 25-Apr-2019| 19:45| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 35,840| 25-Apr-2019| 19:46| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 34,304| 25-Apr-2019| 19:47| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 35,840| 25-Apr-2019| 19:48| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 34,816| 25-Apr-2019| 19:48| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 34,816| 25-Apr-2019| 19:49| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 34,816| 25-Apr-2019| 19:50| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 33,280| 25-Apr-2019| 19:51| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 34,304| 25-Apr-2019| 19:52| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 34,304| 25-Apr-2019| 19:52| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 20,992| 25-Apr-2019| 19:53| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 21,504| 25-Apr-2019| 19:54| Not applicable| None| Not applicable \nWebcheck.dll.mui| 11.0.9600.19354| 21,504| 25-Apr-2019| 19:55| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 46,592| 25-Apr-2019| 19:29| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 52,736| 25-Apr-2019| 19:30| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 51,200| 25-Apr-2019| 19:30| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 51,200| 25-Apr-2019| 19:31| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 56,320| 25-Apr-2019| 19:32| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 57,856| 25-Apr-2019| 19:33| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 49,664| 25-Apr-2019| 20:52| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 54,272| 25-Apr-2019| 19:33| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 47,616| 25-Apr-2019| 19:34| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 49,152| 25-Apr-2019| 19:35| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 55,296| 25-Apr-2019| 19:36| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 45,056| 25-Apr-2019| 19:36| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 51,712| 25-Apr-2019| 19:37| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 51,712| 25-Apr-2019| 19:38| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 53,248| 25-Apr-2019| 19:38| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 39,424| 25-Apr-2019| 19:39| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 35,840| 25-Apr-2019| 19:40| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 50,176| 25-Apr-2019| 19:41| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 51,200| 25-Apr-2019| 19:41| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 50,688| 25-Apr-2019| 19:42| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 52,736| 25-Apr-2019| 19:43| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 53,760| 25-Apr-2019| 19:44| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 54,272| 25-Apr-2019| 19:44| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 54,272| 25-Apr-2019| 19:45| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 52,736| 25-Apr-2019| 19:46| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 51,200| 25-Apr-2019| 19:47| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 53,248| 25-Apr-2019| 19:47| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 52,736| 25-Apr-2019| 19:48| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 51,712| 25-Apr-2019| 19:49| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 50,688| 25-Apr-2019| 19:50| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 50,688| 25-Apr-2019| 19:50| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 50,176| 25-Apr-2019| 19:51| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 50,176| 25-Apr-2019| 19:52| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 30,720| 25-Apr-2019| 19:53| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 30,720| 25-Apr-2019| 19:53| Not applicable| None| Not applicable \nWininet.dll.mui| 11.0.9600.19354| 30,720| 25-Apr-2019| 19:55| Not applicable| None| Not applicable \nInetcpl.cpl| 11.0.9600.19354| 2,135,552| 23-Apr-2019| 20:27| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:29| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:30| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:31| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:31| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:32| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:33| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 20:52| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:33| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:34| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:35| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:36| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:36| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:37| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:38| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:38| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:39| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:40| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:41| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:41| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:42| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:43| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:44| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:44| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:45| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:46| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:47| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:48| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:48| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:49| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:50| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:50| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:51| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:52| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:53| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:54| Not applicable| None| Not applicable \nDiagnosticstap.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:54| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 307,200| 25-Apr-2019| 19:29| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 293,376| 25-Apr-2019| 19:30| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 289,792| 25-Apr-2019| 19:31| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 289,280| 25-Apr-2019| 19:31| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 298,496| 25-Apr-2019| 19:32| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 302,592| 25-Apr-2019| 19:33| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 281,600| 25-Apr-2019| 20:52| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 296,960| 25-Apr-2019| 19:33| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 283,136| 25-Apr-2019| 19:34| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 291,328| 25-Apr-2019| 19:35| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 299,008| 25-Apr-2019| 19:36| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 275,456| 25-Apr-2019| 19:37| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 290,816| 25-Apr-2019| 19:37| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 292,864| 25-Apr-2019| 19:38| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 296,448| 25-Apr-2019| 19:39| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 258,048| 25-Apr-2019| 19:39| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 256,512| 25-Apr-2019| 19:40| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 288,768| 25-Apr-2019| 19:41| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 287,744| 25-Apr-2019| 19:42| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 284,672| 25-Apr-2019| 19:42| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 294,912| 25-Apr-2019| 19:43| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 296,960| 25-Apr-2019| 19:44| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 292,352| 25-Apr-2019| 19:44| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 295,424| 25-Apr-2019| 19:46| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 293,888| 25-Apr-2019| 19:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 293,888| 25-Apr-2019| 19:47| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 292,864| 25-Apr-2019| 19:48| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 290,816| 25-Apr-2019| 19:48| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 288,768| 25-Apr-2019| 19:49| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 286,208| 25-Apr-2019| 19:50| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 281,088| 25-Apr-2019| 19:51| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 286,208| 25-Apr-2019| 19:51| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 291,840| 25-Apr-2019| 19:52| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 241,664| 25-Apr-2019| 19:53| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 242,688| 25-Apr-2019| 19:53| Not applicable| None| Not applicable \nMshtml.dll.mui| 11.0.9600.19354| 242,688| 25-Apr-2019| 19:54| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 61,440| 25-Apr-2019| 19:29| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 73,728| 25-Apr-2019| 19:30| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 67,584| 25-Apr-2019| 19:31| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 67,584| 25-Apr-2019| 19:31| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 74,240| 25-Apr-2019| 19:32| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 78,848| 25-Apr-2019| 19:33| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 61,440| 25-Apr-2019| 20:52| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 74,752| 25-Apr-2019| 19:33| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 62,464| 25-Apr-2019| 19:34| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 68,096| 25-Apr-2019| 19:35| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 75,264| 25-Apr-2019| 19:36| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 61,440| 25-Apr-2019| 19:36| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 68,608| 25-Apr-2019| 19:37| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 72,192| 25-Apr-2019| 19:38| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 73,216| 25-Apr-2019| 19:39| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 41,472| 25-Apr-2019| 19:39| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 37,888| 25-Apr-2019| 19:40| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 68,608| 25-Apr-2019| 19:41| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 67,584| 25-Apr-2019| 19:41| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 65,536| 25-Apr-2019| 19:42| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 74,240| 25-Apr-2019| 19:43| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 70,656| 25-Apr-2019| 19:44| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 71,168| 25-Apr-2019| 19:44| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 71,680| 25-Apr-2019| 19:45| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 71,168| 25-Apr-2019| 19:47| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 69,632| 25-Apr-2019| 19:47| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 68,096| 25-Apr-2019| 19:48| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 68,608| 25-Apr-2019| 19:48| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 68,096| 25-Apr-2019| 19:49| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 65,536| 25-Apr-2019| 19:50| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 59,904| 25-Apr-2019| 19:50| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 65,536| 25-Apr-2019| 19:51| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 69,120| 25-Apr-2019| 19:52| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 29,696| 25-Apr-2019| 19:53| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 30,720| 25-Apr-2019| 19:54| Not applicable| None| Not applicable \nF12resources.dll.mui| 11.0.9600.19354| 30,720| 25-Apr-2019| 19:54| Not applicable| None| Not applicable \nJavascriptcollectionagent.dll| 11.0.9600.19354| 77,824| 23-Apr-2019| 20:49| x64| None| Not applicable \nDiagnosticshub.scriptedsandboxplugin.dll| 11.0.9600.19354| 276,480| 23-Apr-2019| 20:51| x64| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 46,080| 25-Apr-2019| 19:29| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 50,176| 25-Apr-2019| 19:30| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 48,640| 25-Apr-2019| 19:31| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 49,664| 25-Apr-2019| 19:31| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 51,712| 25-Apr-2019| 19:32| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 54,272| 25-Apr-2019| 19:33| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 48,128| 25-Apr-2019| 20:52| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 50,176| 25-Apr-2019| 19:33| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 47,616| 25-Apr-2019| 19:34| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 49,152| 25-Apr-2019| 19:35| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 50,688| 25-Apr-2019| 19:36| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 45,056| 25-Apr-2019| 19:36| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 49,152| 25-Apr-2019| 19:37| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 49,152| 25-Apr-2019| 19:38| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 49,664| 25-Apr-2019| 19:38| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 39,936| 25-Apr-2019| 19:39| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 39,424| 25-Apr-2019| 19:40| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 47,616| 25-Apr-2019| 19:41| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 47,616| 25-Apr-2019| 19:42| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 48,640| 25-Apr-2019| 19:42| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 51,200| 25-Apr-2019| 19:43| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 50,688| 25-Apr-2019| 19:44| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 49,664| 25-Apr-2019| 19:44| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 50,176| 25-Apr-2019| 19:45| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 49,152| 25-Apr-2019| 19:46| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 48,640| 25-Apr-2019| 19:47| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 50,176| 25-Apr-2019| 19:48| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 48,640| 25-Apr-2019| 19:48| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 49,664| 25-Apr-2019| 19:49| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 48,640| 25-Apr-2019| 19:50| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 48,128| 25-Apr-2019| 19:50| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 49,152| 25-Apr-2019| 19:51| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 48,128| 25-Apr-2019| 19:52| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 35,328| 25-Apr-2019| 19:53| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 35,328| 25-Apr-2019| 19:53| Not applicable| None| Not applicable \nUrlmon.dll.mui| 11.0.9600.19354| 35,328| 25-Apr-2019| 19:54| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 9,728| 25-Apr-2019| 19:30| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:30| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 10,240| 25-Apr-2019| 19:31| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 9,728| 25-Apr-2019| 19:31| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:32| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 11,264| 25-Apr-2019| 19:33| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 9,728| 25-Apr-2019| 20:52| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:33| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 10,240| 25-Apr-2019| 19:35| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 10,240| 25-Apr-2019| 19:35| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:36| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 9,216| 25-Apr-2019| 19:36| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 10,240| 25-Apr-2019| 19:37| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 10,240| 25-Apr-2019| 19:38| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:38| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 7,680| 25-Apr-2019| 19:39| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 7,680| 25-Apr-2019| 19:40| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 10,240| 25-Apr-2019| 19:41| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 10,240| 25-Apr-2019| 19:42| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 9,728| 25-Apr-2019| 19:42| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 10,240| 25-Apr-2019| 19:43| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 10,240| 25-Apr-2019| 19:44| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:44| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:45| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 10,240| 25-Apr-2019| 19:47| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 10,240| 25-Apr-2019| 19:47| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 10,752| 25-Apr-2019| 19:48| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 10,240| 25-Apr-2019| 19:48| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 10,240| 25-Apr-2019| 19:49| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 9,728| 25-Apr-2019| 19:50| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 9,728| 25-Apr-2019| 19:51| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 10,240| 25-Apr-2019| 19:51| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 10,240| 25-Apr-2019| 19:52| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 6,656| 25-Apr-2019| 19:53| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 6,656| 25-Apr-2019| 19:53| Not applicable| None| Not applicable \nOccache.dll.mui| 11.0.9600.19354| 6,656| 25-Apr-2019| 19:54| Not applicable| None| Not applicable \nJsproxy.dll| 11.0.9600.19354| 54,784| 23-Apr-2019| 21:11| x64| None| Not applicable \nWininet.dll| 11.0.9600.19354| 5,303,808| 23-Apr-2019| 20:16| x64| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 114,176| 25-Apr-2019| 19:29| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 130,560| 25-Apr-2019| 19:30| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 124,928| 25-Apr-2019| 19:30| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 122,880| 25-Apr-2019| 19:31| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 130,048| 25-Apr-2019| 19:32| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 138,240| 25-Apr-2019| 19:33| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 114,688| 25-Apr-2019| 20:52| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 131,584| 25-Apr-2019| 19:34| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 117,760| 25-Apr-2019| 19:34| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 122,368| 25-Apr-2019| 19:35| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 134,144| 25-Apr-2019| 19:36| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 107,008| 25-Apr-2019| 19:36| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 123,392| 25-Apr-2019| 19:37| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 127,488| 25-Apr-2019| 19:38| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 128,512| 25-Apr-2019| 19:39| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 88,576| 25-Apr-2019| 19:39| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 82,944| 25-Apr-2019| 19:40| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 125,440| 25-Apr-2019| 19:41| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 123,392| 25-Apr-2019| 19:42| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 120,320| 25-Apr-2019| 19:42| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 130,560| 25-Apr-2019| 19:43| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 129,024| 25-Apr-2019| 19:44| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 125,952| 25-Apr-2019| 19:44| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 129,024| 25-Apr-2019| 19:45| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 128,000| 25-Apr-2019| 19:46| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 123,904| 25-Apr-2019| 19:47| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 129,024| 25-Apr-2019| 19:48| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 123,904| 25-Apr-2019| 19:48| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 124,416| 25-Apr-2019| 19:49| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 121,856| 25-Apr-2019| 19:50| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 115,712| 25-Apr-2019| 19:51| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 123,904| 25-Apr-2019| 19:52| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 125,440| 25-Apr-2019| 19:52| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 72,704| 25-Apr-2019| 19:53| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 73,728| 25-Apr-2019| 19:54| Not applicable| None| Not applicable \nInetcpl.cpl.mui| 11.0.9600.19354| 73,728| 25-Apr-2019| 19:54| Not applicable| None| Not applicable \nIedkcs32.dll| 18.0.9600.19354| 396,896| 25-Apr-2019| 19:28| x64| None| Not applicable \nInstall.ins| Not applicable| 464| 23-Apr-2019| 18:25| Not applicable| None| Not applicable \nIeapfltr.dat| 10.0.9301.0| 616,104| 23-Sep-2018| 13:18| Not applicable| None| Not applicable \nIeapfltr.dll| 11.0.9600.19354| 800,768| 23-Apr-2019| 19:53| x64| None| Not applicable \nTdc.ocx| 11.0.9600.19354| 87,552| 23-Apr-2019| 20:49| x64| None| Not applicable \nDiagnosticshub.datawarehouse.dll| 11.0.9600.19354| 666,624| 23-Apr-2019| 21:22| x64| None| Not applicable \nIedvtool.dll| 11.0.9600.19354| 950,784| 23-Apr-2019| 21:44| x64| None| Not applicable \nDiagnosticshub_is.dll| 11.0.9600.19354| 50,176| 23-Apr-2019| 21:24| x64| None| Not applicable \nDxtmsft.dll| 11.0.9600.19354| 489,984| 23-Apr-2019| 20:56| x64| None| Not applicable \nDxtrans.dll| 11.0.9600.19354| 315,392| 23-Apr-2019| 20:43| x64| None| Not applicable \nMicrosoft-windows-ie-f12-provider.ptxml| Not applicable| 11,892| 23-Apr-2019| 18:22| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:29| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:30| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:30| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:31| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:32| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:33| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 20:52| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:33| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:34| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:35| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:36| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:37| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:37| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:38| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:38| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 3,584| 25-Apr-2019| 19:39| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 3,584| 25-Apr-2019| 19:40| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:41| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:42| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:42| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:43| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:44| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:44| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:46| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:47| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:47| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:48| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:48| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:49| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:50| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:50| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:51| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 4,096| 25-Apr-2019| 19:52| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 3,584| 25-Apr-2019| 19:53| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 3,584| 25-Apr-2019| 19:53| Not applicable| None| Not applicable \nF12.dll.mui| 11.0.9600.19354| 3,584| 25-Apr-2019| 19:54| Not applicable| None| Not applicable \nDiagnosticstap.dll| 11.0.9600.19354| 244,224| 23-Apr-2019| 20:54| x64| None| Not applicable \nF12resources.dll| 11.0.9600.19354| 10,949,120| 23-Apr-2019| 21:27| x64| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:29| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:30| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:30| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:31| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:32| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:33| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 20:52| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:33| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:34| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:35| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:35| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:36| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:37| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:38| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:38| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:39| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:40| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:41| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:42| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:43| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:43| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:44| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:44| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:45| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:46| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:47| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:47| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:48| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:49| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:50| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:50| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:51| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:52| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:53| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:53| Not applicable| None| Not applicable \nF12tools.dll.mui| 11.0.9600.19354| 2,048| 25-Apr-2019| 19:54| Not applicable| None| Not applicable \nF12tools.dll| 11.0.9600.19354| 372,224| 23-Apr-2019| 20:53| x64| None| Not applicable \nF12.dll| 11.0.9600.19354| 1,421,312| 23-Apr-2019| 20:39| x64| None| Not applicable \nMsfeeds.dll| 11.0.9600.19354| 809,472| 23-Apr-2019| 20:30| x64| None| Not applicable \nMsfeeds.mof| Not applicable| 1,518| 23-Apr-2019| 18:34| Not applicable| None| Not applicable \nHtml.iec| 2019.0.0.19354| 417,280| 23-Apr-2019| 21:18| Not applicable| None| Not applicable \nMshtmled.dll| 11.0.9600.19354| 92,160| 23-Apr-2019| 20:45| x64| None| Not applicable \nMshtmlmedia.dll| 11.0.9600.19354| 1,359,360| 23-Apr-2019| 20:28| x64| None| Not applicable \nMicrosoft-windows-ie-htmlrendering.ptxml| Not applicable| 3,228| 23-Apr-2019| 18:23| Not applicable| None| Not applicable \nMshtml.dll| 11.0.9600.19354| 25,733,120| 23-Apr-2019| 21:44| x64| None| Not applicable \nMshtml.tlb| 11.0.9600.19354| 2,724,864| 23-Apr-2019| 21:32| Not applicable| None| Not applicable \nIeetwcollector.exe| 11.0.9600.19354| 116,224| 23-Apr-2019| 21:07| x64| None| Not applicable \nIeetwcollectorres.dll| 11.0.9600.19354| 4,096| 23-Apr-2019| 21:32| x64| None| Not applicable \nIeetwproxystub.dll| 11.0.9600.19354| 48,640| 23-Apr-2019| 21:18| x64| None| Not applicable \nIelowutil.exe| 11.0.9600.19354| 222,720| 23-Apr-2019| 21:09| x64| None| Not applicable \nIeproxy.dll| 11.0.9600.19354| 744,960| 23-Apr-2019| 19:50| x64| None| Not applicable \nIeshims.dll| 11.0.9600.19354| 382,976| 23-Apr-2019| 19:58| x64| None| Not applicable \nBing.ico| Not applicable| 5,430| 23-Sep-2018| 13:33| Not applicable| None| Not applicable \nIeunatt.exe| 11.0.9600.19354| 144,384| 23-Apr-2019| 21:06| x64| None| Not applicable \nMicrosoft-windows-ie-internetexplorer-ppdlic.xrm-ms| Not applicable| 2,956| 25-Apr-2019| 20:51| Not applicable| None| Not applicable \nWindows feed discovered.wav| Not applicable| 19,884| 23-Sep-2018| 13:39| Not applicable| None| Not applicable \nWindows information bar.wav| Not applicable| 23,308| 23-Sep-2018| 13:39| Not applicable| None| Not applicable \nWindows navigation start.wav| Not applicable| 11,340| 23-Sep-2018| 13:39| Not applicable| None| Not applicable \nWindows pop-up blocked.wav| Not applicable| 85,548| 23-Sep-2018| 13:39| Not applicable| None| Not applicable \nJsprofilerui.dll| 11.0.9600.19354| 628,736| 23-Apr-2019| 20:46| x64| SPR| AMD64_MICROSOFT-WINDOWS-IE-JSP \nMemoryanalyzer.dll| 11.0.9600.19354| 1,862,144| 23-Apr-2019| 21:04| x64| None| Not applicable \nMshtmldac.dll| 11.0.9600.19354| 88,064| 23-Apr-2019| 21:17| x64| None| Not applicable \nNetworkinspection.dll| 11.0.9600.19354| 1,217,024| 23-Apr-2019| 20:40| x64| SPE| AMD64_MICROSOFT-WINDOWS-IE-NETWORKINSP \nDesktop.ini| Not applicable| 65| 23-Sep-2018| 13:26| Not applicable| None| Not applicable \nOccache.dll| 11.0.9600.19354| 152,064| 23-Apr-2019| 20:41| x64| None| Not applicable \nDesktop.ini| Not applicable| 65| 23-Sep-2018| 13:27| Not applicable| None| Not applicable \nWebcheck.dll| 11.0.9600.19354| 262,144| 23-Apr-2019| 20:32| x64| None| Not applicable \nIcrav03.rat| Not applicable| 8,798| 23-Sep-2018| 13:27| Not applicable| None| Not applicable \nMsrating.dll| 11.0.9600.19354| 199,680| 23-Apr-2019| 20:45| x64| None| Not applicable \nTicrf.rat| Not applicable| 1,988| 23-Sep-2018| 13:27| Not applicable| None| Not applicable \nIertutil.dll| 11.0.9600.19354| 2,902,016| 23-Apr-2019| 21:20| x64| None| Not applicable \nSqmapi.dll| 6.2.9200.16384| 292,960| 25-Apr-2019| 19:28| x64| None| Not applicable \nIe4uinit.exe| 11.0.9600.19354| 728,064| 23-Apr-2019| 20:30| x64| None| Not applicable \nIernonce.dll| 11.0.9600.19354| 34,304| 23-Apr-2019| 21:10| x64| None| Not applicable \nIesetup.dll| 11.0.9600.19354| 66,560| 23-Apr-2019| 21:19| x64| None| Not applicable \nInseng.dll| 11.0.9600.19354| 107,520| 23-Apr-2019| 20:48| x64| None| Not applicable \nTimeline.dll| 11.0.9600.19354| 219,136| 23-Apr-2019| 20:48| x64| None| Not applicable \nTimeline.cpu.xml| Not applicable| 3,197| 23-Sep-2018| 13:26| Not applicable| None| Not applicable \nTimeline_is.dll| 11.0.9600.19354| 171,520| 23-Apr-2019| 21:10| x64| None| Not applicable \nVgx.dll| 11.0.9600.19354| 1,018,368| 23-Apr-2019| 20:45| x64| None| Not applicable \nIeframe.dll.mui| 11.0.9600.19354| 1,639,936| 25-Apr-2019| 19:29| Not applicable| None| Not applicable \nIeui.dll.mui| 11.0.9600.19354| 3,072| 25-Apr-2019| 19:29| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.19354| 1,694,208| 25-Apr-2019| 19:30| Not applicable| None| Not applicable \nIeui.dll.mui| 11.0.9600.19354| 3,072| 25-Apr-2019| 19:30| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.19354| 1,648,640| 25-Apr-2019| 19:31| Not applicable| None| Not applicable \nIeui.dll.mui| 11.0.9600.19354| 3,072| 25-Apr-2019| 19:30| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.19354| 1,636,864| 25-Apr-2019| 19:32| Not applicable| None| Not applicable \nIeui.dll.mui| 11.0.9600.19354| 3,072| 25-Apr-2019| 19:31| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.19354| 1,887,744| 25-Apr-2019| 19:32| Not applicable| None| Not applicable \nIeui.dll.mui| 11.0.9600.19354| 3,072| 25-Apr-2019| 19:32| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.19354| 1,963,008| 25-Apr-2019| 19:33| Not applicable| None| Not applicable \nIeui.dll.mui| 11.0.9600.19354| 3,584| 25-Apr-2019| 19:33| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.19354| 1,606,144| 25-Apr-2019| 20:52| Not applicable| None| Not applicable \nIeui.dll.mui| 11.0.9600.19354| 3,072| 25-Apr-2019| 20:52| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.19354| 1,881,088| 25-Apr-2019| 19:34| Not applicable| None| Not applicable \nIeui.dll.mui| 11.0.9600.19354| 3,072| 25-Apr-2019| 19:33| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.19354| 1,829,376| 25-Apr-2019| 19:34| Not applicable| None| Not applicable \nIeui.dll.mui| 11.0.9600.19354| 3,072| 25-Apr-2019| 19:34| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.19354| 1,634,816| 25-Apr-2019| 19:35| Not applicable| None| Not applicable \nIeui.dll.mui| 11.0.9600.19354| 3,072| 25-Apr-2019| 19:35| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.19354| 1,899,008| 25-Apr-2019| 19:36| Not applicable| None| Not applicable \nIeui.dll.mui| 11.0.9600.19354| 3,584| 25-Apr-2019| 19:36| Not applicable| None| Not applicable \nIeframe.dll.mui| 11.0.9600.19354| 1,593,344| 25-Apr-2019| 19:37| Not applicable| None| Not applicable \nIeui.dll.mui| 11.0.9600.19354| 3,072| 25-Apr-2019| 19:36| Not applicable| None| Not applica