KLA11478 Multiple vulnerabilities in Microsoft Browsers

🗓️ 14 May 2019 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 42 Views

Multiple vulnerabilities found in Microsoft Browsers. Allows remote code execution, UI spoofing, security feature bypass, privilege escalation, and sensitive information disclosur

Reporter	Title	Published	Views	Family All 332
BDU FSTEC	The vulnerability of the Internet Explorer browser, related to errors in URL processing, allows attackers to redirect users to malicious websites.	31 May 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to errors in memory object handling, allows attackers to execute arbitrary code.	31 May 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.	31 May 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.	31 May 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.	31 May 201900:00	–	bdu_fstec
BDU FSTEC	Microsoft Edge’s vulnerability, related to memory object handling errors, allows attackers to execute arbitrary code.	31 May 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to errors in memory object processing, allows a hacker to execute arbitrary code.	31 May 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to errors in memory object handling, allows a hacker to execute arbitrary code.	31 May 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to errors in memory object processing, allows a hacker to execute arbitrary code.	31 May 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to errors in memory object handling, allows a hacker to execute arbitrary code.	31 May 201900:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0940
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0937
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0924
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0913
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0921
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0995
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0918
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0923
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0912
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0929

22 Jan 2024 00:00Current

9.1High risk

Vulners AI Score9.1

CVSS 3.17.5

CVSS 27.6

CVSS 39

EPSS0.23102