Microsoft Patch Tuesday — March 2019: Vulnerability disclosures and Snort coverage

Microsoft released its monthly security update today, disclosing a variety of vulnerabilities in several of its products. The latest Patch Tuesday covers 64 vulnerabilities, 17 of which are rated “critical,” 45 that are considered “important” and one “moderate” and “low” vulnerability each. This...

Scripting Engine Information Disclosure Vulnerability

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. In a web-based attack scenario, an...

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

PT-2019-1585

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description A remote code execution issue exists due to the way the Chakra scripting engine handles objects in memory. This could allow an attacker to execute arbitrary code in the context of the...

PT-2019-1592

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description A remote code execution issue exists due to the way the Chakra scripting engine handles objects in memory. This could allow an attacker to execute arbitrary code in the context of the...

Security Updates for Internet Explorer (March 2019)

The Internet Explorer installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge. The vulnerability cou...

PT-2019-11253

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: An information disclosure issue exists due to the scripting engine's improper handling of objects in memory. This could allow an attacker to obtain information that could be used to...

PT-2019-1649

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to a remote code execution problem in the way the scripting engine handles objects in memory. This could allow an attacker to corrupt memory and execute arbitrary...

KB4489885: Windows 7 and Windows Server 2008 R2 March 2019 Security Update

The remote Windows host is missing security update 4489885 or cumulative update 4489878. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting fores...

PT-2019-1647

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to a remote code execution problem in the way the scripting engine handles objects in memory. This could allow an attacker to corrupt memory and execute arbitrary...

PT-2019-1651

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to a remote code execution problem in the way the scripting engine handles objects in memory. This could allow an attacker to corrupt memory and execute arbitrary...

PT-2019-1587

Name of the Vulnerable Software and Affected Versions Microsoft Edge and Internet Explorer affected versions not specified Description A remote code execution issue exists due to errors in handling objects in memory by the scripting engine in Microsoft browsers. This could allow a remote attacker...

Microsoft Browser Scripting Engine Memory Corruption (CVE-2019-0666)

A memory corruption vulnerability exists in Microsoft Browser. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Remote Code Execution (RCE)

Microsoft.ChakraCore is vulnerable to remote code execution. This is due to the way the ChakraCore scripting engine handles objects in memory which could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. This CVE ID is different from...

CVE-2019-0642

Technical details for CVE-2019-0642 are not publicly available in the provided documents. Monitor for updates from the connected EUVD sources and official advisories before any risk assessment or remediation actions.

CVE-2019-0605

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0607, CVE-2019-0610, CVE-2019-064...

CVE-2019-0605: Out-of-bounds Write

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0607, CVE-2019-0610, CVE-2019-064...

CVE-2019-0605

Technical details about CVE-2019-0605 are not present in the provided documents; no specifics on affected products, root cause, or fixes. Monitor for updates from official sources.

CVE-2019-0605

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0607, CVE-2019-0610, CVE-2019-064...