CVE-2019-0769

high · 7.5

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0639, CVE-2019-0680, CVE-2019-0770, CVE-2019-0771, CVE-2019-0773, CVE-2019-0783.

7.5

CVSS

10.3%

EPSS (exploit prob.)

95th

EPSS percentile

2019-04-09

Published

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-787

Affected products

Vendor	Product	Affected versions
microsoft	chakracore	< 1.11.7
microsoft	edge	all versions
microsoft	windows_10	all versions
microsoft	windows_10	1607
microsoft	windows_10	1703
microsoft	windows_10	1709
microsoft	windows_10	1803
microsoft	windows_10	1809
microsoft	windows_server_2016	all versions
microsoft	windows_server_2019	all versions

Check a specific version with /api/v1/cve/match.

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0769
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0769

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2019-0769