KLA11557 Multiple vulnerabilities in Microsoft Browsers

🗓️ 10 Sep 2019 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 41 Views

Multiple vulnerabilities in Microsoft Browsers, allowing remote code execution, sensitive information disclosure, and security feature bypass

Reporter	Title	Published	Views	Family All 177
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	18 Dec 202022:28	–	githubexploit
ATTACKERKB	CVE-2019-1367	23 Sep 201900:00	–	attackerkb
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.	13 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the VBScript script handler in Internet Explorer allows a hacker to execute arbitrary code.	13 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Internet Explorer and Microsoft Edge browsers stem from security flaws in their URL validation mechanisms. This allows attackers to circumvent existing security restrictions.	17 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Internet Explorer browser’s script handler allows a hacker to execute arbitrary code.	17 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the VBScript script handler in Internet Explorer allows a hacker to execute arbitrary code.	17 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.	17 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.	1 Oct 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to errors in memory object handling, allows attackers to execute arbitrary code.	1 Oct 201900:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1300
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1299
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1138
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1237
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1217
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1221
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1220
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1236
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1208
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1298

08 Dec 2024 00:00Current

8.3High risk

Vulners AI Score8.3

CVSS 3.17.5

CVSS 27.6

EPSS0.15409